State of ICS/OT Security 2025

The SANS 2025 State of ICS/OT Cybersecurity Report draws on 330 responses across industrial sectors to benchmark how organizations are securing critical infrastructure amid escalating threats--from ransomware and supply chain compromise to nation-state activity.

Now in its eighth year, the survey tracks the evolution from ad-hoc defenses to structured programs driven by regulation, threat intelligence, and incident response. This year's findings examine current practices, emerging gaps, and forward-looking plans, giving practitioners and executives a clear roadmap for building resilient OT security operations.