We're Asking the Wrong Question About OT Security Investment
Summary: A Dragos blog post argues that the common OT security question - whether there are enough incidents to justify detection investment - is the wrong frame, because fewer than one in ten OT networks worldwide has network monitoring in place, so known incidents come only from that fraction. The author lays out a three-tier investment pyramid: legal and regulatory requirements at the base, business capability in the middle, and cyber risk reduction at the top, and says most organizations are still struggling to complete the first two tiers.
What you should know: The absence of recorded OT incidents is usually evidence of a monitoring gap, not safety, and the author notes people can die in operations environments - so debating whether to cover a risk to human life based on limited threat data is, in his words, naive at best.
Read the original at Dragos Blog ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026