PowerShell was the primary attack vector with 96,061 detections by Trellix, followed by Cobalt Strike with 85,986 detections targeting the IT-to-OT boundary.

24% of devices across organizations are classified as part of the extended IoT, including IoT, OT, and IoMT.

36% of firms say they now have a moderate focus on OT.

36% of organizations surveyed believe that networking protocols used by OT systems must be understood better to properly secure OT.

38% of organizations surveyed believe that total costs of digitizing physical infrastructure must be understood better to properly secure OT.

44% of elements involved in risk analysis are related to operational technology (OT).

58% of firms say they have a high focus on OT.

38% of organizations surveyed believe that implementing access control, including remote access, must be understood better to properly secure OT.

45% of firms believe existing IT workers need OT training.

34% of firms believe there is insufficient OT budget.

37% of firms believe OT cybersecurity has been overlooked.

33% of organizations surveyed believe that incorporating OT into network maps/architecture must be understood better to properly secure OT.

30% of organizations surveyed believe that patching strategy for OT devices must be understood better to properly secure OT.

94% of companies have a high or moderate focus on operational technology.

41% of organizations surveyed believe that different security priorities for OT vs. IT must be understood better to properly secure OT.

44% of organizations surveyed believe that types of threats that can impact OT must be understood better to properly secure OT.

Regarding Operational Technology (OT) and Industrial Internet of Things (IIoT) systems, 47% of leaders cite a lack of qualified personnel/skillsets and resources as a top three challenge.

48% of cybersecurity professionals view securing converging IT/OT architecture as crucial for positive outcomes over the next five years.

Worst-case scenarios for global financial risk from OT cyber incidents are estimated at as much as $329.5 billion.

In a severe, but plausible scenario (a 1-in-250-year tail event), global OT cyber losses could reach $329.5 billion, with $172.4 billion specifically from OT-related business interruption.