Only 17 percent of organisations report mature OT security practices.
Under half of industrial organisations claim to have strong real-time cyber visibility, but nearly 60 percent have low to no confidence in their Operational Technology.
According to research by Forescout, 50 percent claimed their top security concerns are supply chain threats and cyber-criminal activity, far exceeding concerns about nation-state actors (cited by eight percent) and zero-day vulnerabilities (cited by nine percent).
Also, only 17 percent of organisations report mature OT security practices, while 64 percent classify their maturity as foundational, characterised by manual processes and fragmented visibility and compensating controls. An additional 19 percent identify their cybersecurity maturity as evolving.
A third of organisations take more than 90 days to remediate threats, while 49 percent cite vulnerability prioritisation and risk mitigation (44 percent) as the most laborious tasks.
“Low confidence in OT and IoT threat detection is a warning signal, not just a statistic,” said Christina Hoefer, vice president of OT/ IoT vertical and strategy, Forescout.
“For industrial organisations managing complex, high-stakes environments, improving detection means visibility across all devices, monitoring OT networks and strategically investing in security controls that respect operational needs to reduce risks and enable effective incident response.”
Written by
Dan Raywood is a B2B journalist with 25 years of experience, including covering cybersecurity for the past 17 years. He has extensively covered topics from Advanced Persistent Threats and nation-state hackers to major data breaches and regulatory changes.
He has spoken at events including 44CON, Infosecurity Europe, RANT Forum, BSides Scotland, Steelcon and the National Cyber Security Show, and served as editor of SC Media UK, Infosecurity Magazine and IT Security Guru. He was also an analyst with 451 Research and a product marketing lead at Tenable.