Cyber Risks · Dragos Blog

Risky Business: Maturing OT Security With Executives

Summary: Dragos published new guidance this week outlining a process for industrial leaders to create or refine cyber risk management programs for ICS and OT environments, built on existing standards and meant to get executives, risk managers, and practitioners speaking the same language. The article cites Microsoft and Marsh data that 43% of organizations report cyber risk with qualitative "traffic lights" versus 30% that quantify it, and a Deloitte survey finding only 38% of CEOs and 23% of board members are "highly engaged" in cyber risk discussions.

Bottom line: If only 38% of CEOs are highly engaged in cyber risk discussions, the budget and program support an OT security leader needs is being decided by executives who see red-yellow-green heat maps while finance and safety risk arrive in real dollars and incident data.

Read the original at Dragos Blog ↗

Topics
OT / ICS & Critical Infrastructure
Related
Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026