Four Key Trends in Operational Technology

Today, threat actors are increasingly targeting operational technology (OT) infrastructure. According to the Fortinet 2024 State of Operational Technology and Cybersecurity Report, OT organizations struggle to keep up as cyberattacks on OT systems surge by 73%.

But the news isn't all bad. Even though OT professionals report more intrusions and worse outcomes, security is evolving in many organizations. Everything from leadership structure to technologies that protect OT systems are moving forward. Yet even as many organizations improve security, they still face challenges securing converged IT/OT environments.

It's critical for CISOs and other OT leaders to know what is happening in cybersecurity now and what the trends have been over the last few years. This information can help you assess your current cybersecurity maturity by comparing and contrasting your priorities and security strategies with those of your peers.

1. An OT Mindset Shift

This is the sixth edition of the Fortinet 2024 State of Operational Technology and Cybersecurity Report. Over the years, several key themes and changes have become evident. The first and most obvious change is that the risk to OT has been validated and elevated to the C-suite.

Six years ago, OT security wasn't a priority. Many organizations excused the lack of security because the factory was air gapped or unconnected from IT systems and associated online threats. However, cybersecurity has become a priority as more organizations have connected their factories and critical infrastructure to the outside world. An ever-increasing number of companies and governments are taking steps to appropriately secure critical infrastructure and vital production systems.

Today, the risks to OT networks and critical infrastructure are finally recognized and prioritized. Once a company realizes and understands that something must be done to mitigate threats, OT security becomes a major priority, and personnel and other resources are assigned to the task.

Over the years, we've seen CISO responsibilities elevated to include OT, which has increased year over year. Interestingly, we also see other members of the C-suite taking on the responsibility for OT, including the CIO, COO, and CTO. Having the CISO and the entire C-suite take on responsibility for OT security and risk mitigation represents a major mindset shift at many organizations.