A recent survey, commissioned by Palo Alto Networks and conducted in December 2023 across 16 countries, sheds light on the widespread occurrence of cyberattacks in industrial sectors, with one in four organizations reporting the shutdown of Operational Technology (OT) operations due to successful attacks.

The findings highlight the severity of the situation, with three-quarters of respondents detecting malicious cyber activity in their OT environment. Of these, 24% reported having to shut down OT operations within the past year, either due to actual disruption or as a precautionary measure.

The repercussions of such shutdowns extend beyond immediate operational losses, encompassing additional costs for damage control, event remediation, and implementing enhanced security measures. Furthermore, the long-term consequences may include reputational damage, regulatory penalties, and disruptions in supply chains.

While attacks are predominantly initiated through IT systems, 28% of respondents reported attacks originating within their OT environment. Despite the prevalence of cyber threats, over 60% of organizations prioritize initiatives to safeguard their OT environments, with many planning to increase their OT cybersecurity budgets in the coming years.

In terms of decision-making regarding OT cybersecurity investments, responsibility is often shared between IT and OT departments. However, there remains room for improvement in collaboration, as only 43% of respondents perceive the relationship between IT and OT as coordinated or constructive.

Regarding the role of artificial intelligence (AI) in cybersecurity, respondents recognize both the threat posed by AI-enabled attacks on OT infrastructure and the potential of AI-driven security solutions to detect and mitigate such threats. However, there is concern about the use of AI by hackers, with approximately half of respondents fearing that AI may empower attackers more than security teams. Nonetheless, many believe that AI-driven security solutions will play a crucial role in reducing the need for extensive security personnel within their organizations.