The 2023 State of Operational Technology and Cybersecurity Report published on Wednesday by Fortinet shows a drop in the number of intrusions at OT organizations.
The report is based on a survey of 570 OT professionals, representing the manufacturing, transportation, healthcare, oil and gas, energy, chemical, and water sectors in countries such as the US, Canada, Australia, Brazil, Mexico, the UK, France, Germany, Japan, India, South Africa, and Egypt. A vast majority of the respondents are regularly involved in cybersecurity purchase decisions.
The survey found that the number of OT organizations that did not suffer a breach has increased to 25%, from 6% in the previous year. The decrease in the number of incidents is driven by a drop from 29% to 12% in insider breaches. The percentage has remained roughly the same for most types of incidents, except for malware and phishing.

The number of intrusions that affected both IT and OT systems increased from 21% in 2022 to 32% in 2023. On the other hand, incidents impacting only OT environments have dropped from 40% to 17%.
Many organizations are concerned about ransomware attacks. While these types of attacks typically target the IT or enterprise network, they can directly or indirectly impact production as well.
The survey also found that CISOs are increasingly responsible for OT cybersecurity. In 95% of cases, the CISO is or will soon be responsible for OT security, up from 88% in the previous year.
“The data also shows that OT security professionals are coming from the ranks of the IT team rather than those with product management work experience. As a result, and as the survey data indicates, the C-suite and traditional security leaders, especially the CISO/CSO, are becoming more involved and invested in cybersecurity decision-making,” Fortinet said in its report.
The report also shows that fewer organizations are highly confident in their OT security posture, but that’s not necessarily a bad thing.
“Globally, fewer companies characterize their OT security posture as highly mature this year, down from 21% in 2022 to 13% this year. At the same time, 44% of organizations now characterize their OT cybersecurity posture maturity at Level 3, up from 35% a year ago. This data indicates that this year’s respondents may have a more realistic self-assessment of their OT cybersecurity capabilities,” Fortinet explained.
Fortinet’s report, available in PDF format, also contains information on the types of OT security solutions used by organizations, as well as tips and recommendations.
Learn More at SecurityWeek’s ICS Cyber Security Conference
The leading global conference series for Operations, Control Systems and OT/IT Security professionals to connect on SCADA, DCS PLC and field controller cybersecurity.
October 23-26, 2023 | Atlanta
www.icscybersecurityconference.com
Related: New Data Sharing Platform Serves as Early Warning System for OT Security Threats
Related: Waterfall Security, TXOne Networks Launch New OT Security Appliances

Eduard Kovacs (@EduardKovacs) is a contributing editor at SecurityWeek. He worked as a high school IT teacher for two years before starting a career in journalism as Softpedia’s security news reporter. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.
More from Eduard Kovacs
- In Other News: Government Use of Spyware, New Industrial Security Tools, Japan Router Hack
- Apple Denies Helping US Government Hack Russian iPhones
- Zero-Day in MOVEit File Transfer Software Exploited to Steal Data From Organizations
- Russia Blames US Intelligence for iOS Zero-Click Attacks
- Cisco Acquiring Armorblox for Predictive and Generative AI Technology
- Moxa Patches MXsecurity Vulnerabilities That Could Be Exploited in OT Attacks
- Organizations Warned of Salesforce ‘Ghost Sites’ Exposing Sensitive Information
- Organizations Warned of Backdoor Feature in Hundreds of Gigabyte Motherboards
Latest News
- Insider Q&A: Artificial Intelligence and Cybersecurity In Military Tech
- In Other News: Government Use of Spyware, New Industrial Security Tools, Japan Router Hack
- OpenAI Unveils Million-Dollar Cybersecurity Grant Program
- Galvanick Banks $10 Million for Industrial XDR Technology
- Information of 2.5M People Stolen in Ransomware Attack at Massachusetts Health Insurer
- US, South Korea Detail North Korea’s Social Engineering Techniques
- High-Severity Vulnerabilities Patched in Splunk Enterprise
- Idaho Hospitals Working to Resume Full Operations After Cyberattack
