State of ICS/OT Security Report

For nearly a decade, the SANS State of ICS/OT Security Survey has tracked the industry's shift from ad-hoc protection to structured, threat-informed programs. The latest report draws on insights from 330+ professionals to reveal the trends, capability gaps, and strategic priorities shaping ICS/OT resilience in the years ahead.
What You’ll Take Away:
Where you rank against your peers
22% reported a cybersecurity incident this past period. See how you compare.
Why detection speed isn't enough
Half of incidents are caught within 24 hours, but remediation can drag on for weeks.
The access control blind spot
Unauthorized access drives half of all incidents. Only 13% have the controls to stop it.
Where the industry is investing next
Visibility, detection, and secure remote access top the priority list. See if you're aligned.