Critical infrastructure needs access control that leaves nothing to chance.
Energy and water companies are targets for organized and state-backed attackers, and their estates mix cloud apps with engineering and control software built decades ago. My1Login covers all of it, releases shared control accounts only to the right people, and logs every access.
- Shared control accounts, released by policy
- MFA per app, one common method
- ~600 apps found and integrated at Natural Power
| Who | Can | When |
|---|---|---|
| Shift engineers | Use | On shift only |
| Control room leads | Use, view | Any time |
| Contractor · J. Reid | Use | Weekdays until 31 Oct |
| Everyone else | — | — |
Trusted in energy and utilities by
Part of the national infrastructure, and targeted like it.
Disrupting an energy or water provider has consequences far beyond the company itself, which is exactly why attackers try.
Shared control accounts
Many control systems run on single accounts that several authorized people need, so the password gets shared.
What it leads to: no record of who used the account, and passwords that never change.
MFA on apps that can't do it
Regulation often expects MFA, but individual web and legacy applications may not support a common method.
What it leads to: gaps in MFA coverage on critical systems.
State-backed and organized attackers
Phishing and stolen passwords are the easiest route into an operator, and attackers are patient.
What it leads to: one reused password away from disruption.
Every app covered, every shared account controlled.
Access is the first line of attack, so My1Login makes it your first line of defense.
Shared accounts by policy
Release shared and privileged accounts to the right people at the right time, without anyone seeing the password.
MFA per app
Protect specific applications with one common method of MFA, including those that can't do MFA themselves.
Non-repudiation
A record of who accessed which system and when, so every use of a shared account has a name against it.
Natural Power found around 600 apps, and integrated every one.
"My1Login has helped us identify around 600 business applications in-use and 100% of these are now integrated with My1Login's IAM solution…"
"We recognize that the energy sector is a key target and implementing My1Login has enabled us to mitigate this significant risk."
- ~600apps found and integrated at Natural Power
- <1 hourto the first user up and running
More stories
Evidence for the regulations operators answer to.
Operators of essential services must show they manage who can access the systems that keep supply running.
| Framework | What it expects of access | How My1Login helps |
|---|---|---|
| NIS Regulations and the Cyber Assessment Framework | Operators of essential services are assessed against the CAF; objective B2 covers identity and access control, including privileged access. | Shared and privileged accounts released by policy, MFA per app and an audit trail of every access. |
| Cyber Essentials Plus | User access control, strong authentication and admin rights kept separate. | Unique, strong, hidden passwords and MFA on the apps that need it. Password policies enforced on every account. |
| UK GDPR | Appropriate technical measures to protect customer personal data. | Zero-knowledge encryption, so nobody outside your organization can read stored credentials, including My1Login. |
| ISO/IEC 27001 (yours) | Controls over who can access what, how they authenticate, and a record of access. | Governance of access to every system and a full audit trail, as evidence for your own certification. |
Built for operators of essential services.
Everything below works across web, cloud and Windows desktop systems.
Shared and privileged accounts
Use without seeing the password, for set times, with every use logged.
Step-up and MFA per app
Require an extra check before your most critical systems open.
Engineering and legacy software
Single sign-on for Windows desktop and custom-built applications, with no API needed.
One-time codes, generated and filled
Authenticator codes generated and filled in automatically.
Contractor access by date
Give contractors access for the dates and hours they work, and it ends on time.
Shadow IT found
Natural Power found around 600 apps in use, and brought every one under control.
Leavers, in one step
Access to every system ends when someone leaves the directory.
Zero-knowledge encryption
The keys stay inside your network. Nobody outside it can read your stored credentials, including us.
Energy and utilities questions
Can several engineers share one control account safely?
Yes. Share it with the people who need it, for the times they need it, without anyone seeing the password. Every use is recorded against the person who used it.
Can we add MFA to applications that don't support it?
Yes. My1Login applies MFA policies to specific applications using one common method, including legacy and web applications without MFA of their own.
Does it work with custom-built and engineering software?
Yes. My1Login provides single sign-on for Windows desktop and custom-built applications, with no API required.
How long does it take to get started?
At Natural Power and ELEXON, the first user was up and running in less than an hour.
Bring a shared control account to a 5-minute demo.
We'll release it to the right people, hide its password and show you the record of every use.
- 5 minutes, on your own apps
- A specialist replies within one working day
- No obligation