Many IT systems contain components that offer integrated functions for remote maintenance. However, these functions are often poorly documented and not taken into account during the procurement and operation of IT systems.

Integrated remote maintenance components have far-reaching access to the IT systems in which they are installed. This access often directly affects other components of the IT system and can thus bypass the security mechanisms of the underlying operating system. In addition, integrated remote maintenance functions can contain vulnerabilities that facilitate unauthorised access to IT systems.