Applied Risk warns that even though cyber risk awareness has increased, cybersecurity is still often an afterthought in industrial environments where new technologies are regularly deployed without proper testing. As a result, Operational Technology (OT) used in critical infrastructure is often vulnerable to cyberattacks.

The most common flaws in industrial control systems are connected to misconfigurations (34.7%), vulnerabilities, patches and updates (26.7%), identity and access management (12.9%), insecure services (7.9%), architecture and network segmentation (7.9%), and encryption and authentication (5.9%).

Read more: Cybersecurity should not be an afterthought within industrial environments