84% of senior cybersecurity decision makers point to IT vulnerabilities as a worrisome bridge into OT/ICS environments.

PowerShell was the primary attack vector with 96,061 detections by Trellix, followed by Cobalt Strike with 85,986 detections targeting the IT-to-OT boundary.

24% of devices across organizations are classified as part of the extended IoT, including IoT, OT, and IoMT.

94% of companies have a high or moderate focus on operational technology.

30% of organizations surveyed believe that patching strategy for OT devices must be understood better to properly secure OT.

33% of organizations surveyed believe that incorporating OT into network maps/architecture must be understood better to properly secure OT.

37% of firms believe OT cybersecurity has been overlooked.

34% of firms believe there is insufficient OT budget.

45% of firms believe existing IT workers need OT training.

44% of organizations surveyed believe that types of threats that can impact OT must be understood better to properly secure OT.

38% of organizations surveyed believe that total costs of digitizing physical infrastructure must be understood better to properly secure OT.

58% of firms say they have a high focus on OT.

36% of organizations surveyed believe that networking protocols used by OT systems must be understood better to properly secure OT.

44% of elements involved in risk analysis are related to operational technology (OT).

41% of organizations surveyed believe that different security priorities for OT vs. IT must be understood better to properly secure OT.

38% of organizations surveyed believe that implementing access control, including remote access, must be understood better to properly secure OT.

36% of firms say they now have a moderate focus on OT.

Regarding Operational Technology (OT) and Industrial Internet of Things (IIoT) systems, 47% of leaders cite a lack of qualified personnel/skillsets and resources as a top three challenge.

48% of cybersecurity professionals view securing converging IT/OT architecture as crucial for positive outcomes over the next five years.

Worst-case scenarios for global financial risk from OT cyber incidents are estimated at as much as $329.5 billion.