2025 OT Security Financial Risk Report

report

The 2025 OT Security Financial Risk Report

A first-of-its-kind analysis by Marsh McLennan reveals operational technology (OT) cyber threats pose hundreds of billions in annual financial risk globally and delivers industry-by-industry insights on which sectors are most at risk.

DOWNLOAD THE REPORT

Partnership with Marsh McLennan: This analysis combines Dragos’s industry-leading OT security expertise with Marsh McLennan’s proprietary data from the Cyber Risk Intelligence Center, leveraging a decade of information security events and claims to reveal the financial impact of OT cybersecurity incidents. We offer recommendations on how to leverage the analysis to reduce OT cyber risk.

Keep scrolling to discover key takeaways from the cyber risk assessment. Be sure to download the full report for a comprehensive analysis.

Why Cyber Risk Management Matters for Critical Infrastructure

The Financial Impact of Cyber Attacks

The Reality Check: Industrial cybersecurity represents a massive economic threat.

$US 329.5 billion globally at risk from OT cybersecurity incidents – based on a 1:250 tail scenario (0.4% likelihood of occurring next year)

Once-isolated industrial systems are now interconnected networks vulnerable to attacks that can shut down supply chains, power grids, and manufacturing. OT security risk management is more important than ever.

Indirect Costs: The Hidden Multiplier in OT Cybersecurity

The Ripple Effect: Most financial damage comes from secondary effects, not direct system compromise.

70% of OT cybersecurity breaches result in indirect costs rather than direct damage

Cyber attacks cost far more than system repairs—lost production, supply chain disruptions, emergency response, and reputation damage typically dwarf remediation expenses.

If You Do One Thing: Prepare for Incident Response

The Game Changer: Incident response planning outperforms all other OT security controls in cyber risk management.

18.46% average risk reduction from proper incident response planning

Organizations with comprehensive incident response planning – including OT-specific scenarios, tabletop exercises, and pre-positioned data collection – can reduce cyber risk by nearly one-fifth, according to Marsh McLennan analysis.

Industries and Regions That Face the Most Cyber Risk

The Risk Landscape: Threat levels vary dramatically by industry and region.

Manufacturing leads with most exposure, and North America is the hotspot.

Manufacturing in North America has become ground zero for OT cyber attacks. This reflects both target attractiveness and increasing industrial digitalization. OT cyber risk management must be a priority.

Download the report to ensure your organization is ready for the challenges ahead.