Insights · Field note · Infrastructure and resilience
Remote hands and smart hands: coordinating field work securely
A technician you have never met is about to touch your equipment because someone sent an email. The request process is the control.
Remote hands and smart hands are the services by which on-site technicians at a facility perform physical and basic technical tasks for an organization that is not present: reboots, cable moves, hardware swaps, console access. Each request is an instruction to change production, and most facilities execute them on little more than an email from a recognized address. Secure coordination means verifying who may request what, authorizing each request against a change record, defining exactly what will be done, logging the work, and closing the request with confirmation. It costs minutes per request and prevents the quiet errors and the deliberate abuses that unverified requests allow.
In detail
What the evidence shows.
What goes wrong
A request from a spoofed or compromised mailbox. A reboot of the wrong device because the label was ambiguous. A cable moved without a record, found months later during an outage. Console access granted and never revoked. A hardware swap that removed a disk with data on it. None of these is exotic; all of them follow from treating a request as routine.
The request standard
Named requesters per organization, verified by a second channel for anything consequential. A request that states the device, the action, the expected result and the rollback. Authorization against a change record. A window. The technician confirms the identification before acting and reports what was done.
Logging and closure
Every request logged with requester, authorizer, technician, time, actions and outcome. Closure confirmed by the requester. Temporary access revoked at closure and checked. The log is evidence for the customer’s auditors and for the facility’s own.
Coordinating across providers
Organizations with equipment in several facilities need one standard applied to all of them, with escalation when a facility cannot meet it. See remote hands and smart hands coordination, secure maintenance windows and the data centers and infrastructure industry page.
Sources
Primary references.
- NIST SP 800-53 Rev. 5, Security and Privacy Controls for Information Systems and Organizations (configuration management, maintenance and physical protection families)
- Performance Data engagement observations (first-hand: David Selakovic); method described under Infrastructure Resilience and Partner and White-Label Delivery.
By David Selakovic · Published 2026-10-16 · Revised 2026-10-16 · Reviewed every 180 days