An integrator is a third-party specialist that designs, installs, supports, or maintains industrial control systems (ICS) and operational technology (OT). Integrators often know the engineering logic, vendor tools, device configurations, and remote support methods that keep a plant running. In practice, they may hold service accounts, remote-access credentials, configuration files, and documentation that are highly sensitive.
Integrators matter in cyber security because they expand the trusted boundary around OT. If an integrator account is overprivileged, reused, poorly monitored, or left active after a project ends, it can become a path into a control network. Attackers may target integrator tools, remote support channels, or stored engineering data to change settings, disrupt operations, or move deeper into an environment. Defenders reduce this risk with least privilege, strong authentication, segmentation, logging, account reviews, and tight control of remote access and backup files.