Fortinet: Cybercriminals Heavily Targeting OT Organizations

Operational technology (OT) organizations continue to be targeted by cybercriminals at a high rate, according to a Fortinet report.

The Fortinet 2023 State of OT and Cybersecurity Report is based on data from a global survey of 570 OT professionals conducted by a third-party research company. The results represent the current state of OT security and point to the opportunity for continued improvement for organizations to secure an ever-expanding IT/OT threat landscape.

All respondents worked in one of the following industries: manufacturing; transportation/logistics; health care/pharma; energy/utilities; chemical/petrochemical; or water/wastewater.

High Number of OT Organizations Reported Intrusions This Past Year

Fortinet’s Willi Nelson

Willi Nelson, field CISO for OT at Fortinet, said the number of organizations that didn’t incur a cybersecurity intrusion improved significantly year-over-year.

“This year, 25% of respondents reported they didn’t experience an intrusion compared to 6% in the 2022 report,” he said. “The overall decline based on respondent feedback can be attributed to fewer insider breaches, though not necessarily fewer cybercriminal attacks. This speaks to a focus across the industry for improved cybersecurity awareness training and practices within these organizations. That said, there’s obviously still a lot of room to grow considering that 75% of organizations did experience an intrusion this past year.”

About a third of respondents said they were victims of a ransomware attack, the same as last year, Nelson said.

Organizations’ Security Posture Overestimated

Other findings from the Fortinet report include:

Opportunities to Help OT Organizations

Nelson said there are many opportunities for partners to help OT organizations improve their cybersecurity posture.

“One of the challenges OT organizations have when it comes to strengthening their security posture is solution sprawl,” he said. “Security solutions are obviously helpful, but organizational leaders need a better way to get a handle on all of them. Consolidation can reduce complexity and accelerate outcomes. OT organizations should develop an OT cybersecurity platform strategy, which requires partnering with vendors that engineer their products with integration and automation in mind.”

Cybersecurity providers should play a role in helping organizations consistently incorporate and enforce policies across the increasingly converged IT/OT landscape, as opposed to just selling more disparate solutions, Nelson said.

“Another area that cybersecurity providers can help with is training and cyber hygiene to help organizations ensure they are using the tools correctly and that all employees know what to watch out for in terms of things like phishing attacks, etc.,” he said.