Cybersecurity risks rise for OT and IIoT systems

Operational Technology (OT) and Industrial Internet of Things (IIoT) systems are increasingly targeted by cyber adversaries. Data from the SANS 2023 ICS/OT Cybersecurity Survey indicates there were 68 attacks with physical consequences in 2023, impacting more than 500 OT sites globally.

As critical infrastructure sectors—including energy, water treatment, transportation, manufacturing, and chemical processing—rely more heavily on these integrated technologies, the potential for physical cybersecurity incidents grows. While IIoT integration has improved operational efficiency and real-time monitoring, it has also introduced new vulnerabilities into environments where disruptions can lead to safety risks or loss of life.

In response to these evolving threats, the European Union is implementing the Network & Information Security Directive (NIS2), which goes into effect in January 2025. The directive mandates stricter security protocols, comprehensive incident reporting, and business continuity planning for essential and important sectors across the EU, including energy, transport, banking, and digital infrastructure.