Cyber Risks · Dragos Blog

Managing External Connections to Your Operational Technology (OT) Environment

Summary: Dragos's 2021 Year In Review found that 70% of ICS environments have external connections from OEMs, IT networks, or the internet to the OT network, more than double the 2020 figure. The same report states that 77% of Dragos service engagements showed network segmentation issues, and that ICS/OT vulnerabilities doubled year over year to 1,665, with 35% capable of causing both loss of view and loss of control and about 90% having no mitigations in place.

Bottom line: Third-party and vendor connections are the most common path into OT environments, which means organizations inherit the security posture and risk of those partners - and with roughly 90% of the 1,665 identified vulnerabilities lacking mitigations, the Level 3/Level 4 boundary is the control point that matters most.

Read the original at Dragos Blog ↗

Topics
OT / ICS & Critical Infrastructure
Related
Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026