Seventy-nine percent of organizations also had OT networks with more than a pair of non-enterprise-grade remote access tools, which usually lack role-based access controls, auditing, multi-factor authentication, and session recording capabilities, as well as timely security fixes.