A production dependency is any system, service, or tool that a business relies on for daily operations. Unlike a test or pilot system, it sits in the path of real work: it may handle customer data, trigger workflows, support decisions, or integrate with other internal systems.
This matters in cyber security because once a capability becomes production-critical, its failure or compromise can disrupt operations, expose sensitive data, or create unauthorized actions at scale. Attackers often target production dependencies through stolen credentials, insecure integrations, weak change control, or dependency chains that reach into trusted systems. Defenders treat these systems as high-value assets, applying least privilege, monitoring, backups, validation, and formal change management so that a useful tool does not become an operational single point of failure.