State of Critical Infrastructure Cybersecurity Report

Organizations use an average of seven disparate security systems and tools to monitor and identify risk.

74% of organizations have not fully integrated IT and OT security operations across their organization.

95% of critical infrastructure leaders express concern about Frontier AI-powered attacks on critical infrastructure.

91% of critical infrastructure leaders expect AI-driven cybersecurity to play a role in defending against exploits accelerated by Frontier AI models.

53% of organizations have policy enforcement and access controls in place across connected assets and users.

42% of organizations name legacy, unpatchable OT assets as their single biggest cybersecurity risk.

92% of critical infrastructure leaders say alert prioritization is important or critical.

50% of critical infrastructure leaders still rely on CVSS scores or manual review for alert prioritization.

40% of organizations have virtual patching or other immediate compensating controls in place.

68% of critical infrastructure organizations do not have complete, real-time visibility of all assets connected to their OT networks.

60% of organizations suffered a significant security breach in the past year.