SANS State of OT Security 2025: What the Data Tells Us
Summary: The 2025 SANS State of ICS/OT Cybersecurity Survey, drawing on responses from over 330 industrial cybersecurity professionals worldwide, found that nearly 50% of incidents in 2025 were detected within 24 hours and 60% were contained within 48 hours of detection. Only 12.6% of organizations report full visibility across the ICS Cyber Kill Chain, and just 21% deployed threat intelligence integration capabilities in 2025.
Key Takeaway: Most organizations can see threats approaching but lose visibility at the supervisory and control layers where adversaries can manipulate setpoints or disable safety systems, and only 14% of respondents felt fully prepared for emerging OT cyber threats.
Read the original at Dragos Blog ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026