OT Security, In Practice: 4 Cross‑Industry Trends from Global Assessments and How CISOs Should Respond
Summary: Sygnia's review of OT security assessments, adversary simulations and incident response engagements conducted globally between 2022 and 2025 found that in roughly 60% of simulations, access to OT was achieved through management infrastructure, most commonly jump servers, and that more than 50% of assessed environments had limited or no SIEM or SOC telemetry in OT or management zones. In approximately 50% of assessments, OT backup platforms were reachable from IT or management tiers or lacked offline or immutable copies, and around 50% showed no evidence of a tested OT recovery process.
What's compelling: Half of the assessed environments held backups that an attacker reaching IT or management tiers could also reach, and half had never tested restoring OT services - so the recovery capability many organizations count on has not been proven to work under the conditions of an actual incident.
Read the original at The Hacker News ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026