Attackers are practical people. They don't pick the hardest way in. They pick the easiest one. In a warehouse, a plant, or a distribution center, the easiest ways in tend to be the same seven doors. Here they are, with the answer to each.
Door one: the factory password
Cameras, gate readers, and controllers often still use the login they shipped with, or one password shared across a whole fleet. Attackers keep lists of these. The answer: know every device you have, give each one its own login, and get an alert when someone keeps guessing.
Door two: old software
Many floor devices run software that's years out of date, with weaknesses anyone can look up. Updating means a vendor visit and downtime, so it waits. The answer: track the software on every device, update what can reach important systems first, and fence off what you can't update yet.
Door three: one big flat network
The yard camera and the shipping system sit on the same network. Get into one, and you can see the other. The answer: separate the floor devices from the systems that run the business, and be ready to cut off a single device the moment it misbehaves.
Door four: the vendor who never left
The company that installed your dock doors, conveyor, or refrigeration often keeps a permanent remote connection. Handy for repairs. Also an open door into your building, day and night. The answer: see every vendor session as it happens, allow it only when you've approved it, and question anything unexpected.
Door five: the control panel anyone can open
The setup page for a camera or controller is often reachable from the guest Wi-Fi, or even the internet. The answer: find every one of them and close it.
Door six: the radio nobody watches
RFID readers, handheld scanners, wireless links, and cellular modems all talk over the air. Most security teams rarely look at that traffic. The answer: treat wireless and radio links as part of your network, and watch them like you watch everything else.
Door seven: the fix nobody checked
This one is new, and it's the sneakiest. Your team changes a password or blocks a connection, and the attacker is out. Good. But nobody checked whether the scanner still scans or the gate still opens. Monday morning, trucks line up at a gate that won't move. The answer: every fix gets two checks. Is the door closed? And does the device still do its job?
Look at the pattern. Every answer comes down to three moves. See the device. Prove what risk it carries. Control it quickly, with a person in charge and proof that both the security and the service are intact. That's the method. The next three chapters show you how.
Questions for your team
Which of these seven doors would your team bet is closed in every building? Which one are you least sure about?