TeckNexus and OneLayer launch cellular security assessments for critical infrastructure

TeckNexus and OneLayer have launched two interactive assessments to help utilities, ports, airports, manufacturers and other critical infrastructure operators measure cellular security, visibility and device-management maturity. The tools arrive as attacks on connected infrastructure, including a Polish energy incident tied to a shared private APN, show how weak cellular governance can expose OT environments.

Why it matters: - Critical infrastructure operators are adding more devices over private LTE/5G and carrier private APNs. - The new assessments aim to show where visibility, governance and provisioning gaps could create real operational and security risk. - The launch lands as attackers increasingly target cellular-connected OT environments, including an incident in Poland that forced critical PLCs to shut down.

What happened: - TeckNexus announced two interactive assessment tools built with OneLayer and live on the TeckNexus Intelligence Platform. - The tools are designed for network, security and operations leaders at utilities, airports, ports, manufacturing sites and other cellular-heavy environments. - The announcement follows an August 8 disclosure by CERT Polska of an attack on a Polish combined heat and power plant serving about 50,000 residents. - In that incident, attackers pivoted through a shared private APN after compromising an unrelated wind farm, then reached the plant's OT environment.

The details: - The Device Onboarding Assessment is a five-section, 16-question benchmark that takes five to seven minutes. - The assessment places organizations on a maturity scale from Reactive to Structured to Automated. - It measures SIM and device provisioning, SIM lifecycle accuracy, team burden and troubleshooting, and coverage and future readiness. - It checks how many teams and approvals are involved before a device goes live and how long onboarding takes from SIM activation to full configuration. - Reported onboarding times range from under 30 minutes with automation to half a day or more with manual handoffs. - The assessment looks for so-called ghost SIMs, meaning active SIMs that are still billing but no longer tied to an operational device. - It also measures how many people can provision SIMs and what happens when a field device stops communicating. - The tool examines whether fleets span multiple carriers or cores, whether SIMs support over-the-air profile migration and whether organizations can scale deployments 25% to 50% over the next 18 months without adding headcount at the same pace. - Results include a maturity tier, a section-by-section breakdown and a prioritized action plan. - The Security and Asset Management Assessment is a five-section, 17-question benchmark that also takes five to seven minutes. - It places organizations on a maturity scale from Exposed to Partial Coverage to Governed. - It measures device and SIM visibility, authentication and access control, threat awareness and compliance readiness, and program maturity and organizational readiness. - The assessment checks whether an organization can identify the make, model, manufacturer and firmware of every device on its cellular network, including devices behind routers or gateways. - It also checks for unauthorized devices that connect outside standard procurement paths. - The benchmark examines whether SIM-to-device correlation is continuously validated and whether per-device access policy is enforced at the cellular layer. - It covers readiness around state-sponsored campaigns such as Salt Typhoon and Volt Typhoon. - It also looks at how cellular-connected devices map to NERC CIP, IEC 62443 and TSA cybersecurity directives. - Results include a maturity tier, section-level scoring, a flagged top gap and a recommended action sequence. - Each assessment ends with an optional no-cost architecture walkthrough with the OneLayer team and a downloadable PDF summary. - TeckNexus said the tools are built from real deployment patterns rather than a generic survey. - OneLayer said the assessments are meant to give organizations a quick read on where they stand before they try to close the gap. - TeckNexus said both assessments are available now on the TeckNexus Intelligence Platform. - TeckNexus also directs readers to a OneLayer coverage hub on its site for more on the partnership: OneLayer coverage hub. - The assessments are also available on the TeckNexus Intelligence Platform: TeckNexus Intelligence Platform.

Between the lines: - The tools are not generic security quizzes. - They focus on the operational failure points that can leave cellular-connected OT exposed: provisioning sprawl, missing inventory, weak device-to-SIM control and limited response speed. - The Poland incident is a concrete example of how a shared cellular path can become a lateral movement route into critical infrastructure. - That makes visibility across both private and carrier cellular environments a governance issue, not just an IT inventory task.

What's next: - TeckNexus and OneLayer are offering media and analyst briefings on the partnership. - Organizations using the assessments can use the scorecards to prioritize automation, tighten access controls and identify the highest-risk gaps first. - The broader bet is that more operators will move from ad hoc cellular management to formal maturity benchmarking as connected OT grows.

The bottom line: - As private cellular expands across critical infrastructure, operators need a faster way to see where device onboarding and security controls are breaking down before attackers find those gaps first.