“Cybersecurity budgets have increased, but a large portion of these investments are still focused on traditional business systems like IT,” said Holger Fischer, director of sales for EMEA Central at Opswat, commenting on the results.
This leads to ICS/OT environments being unprepared for cyberthreats, jeopardizing the company as a whole, the security specialist warned.
Cross-sector security strategy required
Nearly three out of every five (58%) respondents stated that attacks on OT networks initially occurred through a compromise of IT. Other attack vectors include internet-connected devices (33%), compromise of engineering workstations (30%), and exploited publicly accessible applications (27%).