A Honeywell benchmark survey has found a gap between industrial organizations’ confidence in their operational-technology cybersecurity programs and the asset records and monitoring controls they report having in place. Security Today published the findings on September 28.
Complete inventories remain uncommon
The report surveyed more than 600 leaders responsible for cybersecurity risk, compliance or operations across energy, oil and gas, healthcare, maritime and manufacturing. Security Today reported that 88% described their programs as mature, while 21% said they maintained complete OT asset records.
Only one-third of surveyed organizations reported complete OT integration with centralized security operations centers. Continuous oversight of connected cameras, sensors and other IoT devices was less common, illustrating how physical and operational technology can remain outside enterprise monitoring.
Confidence should be tested against evidence
Self-assessed maturity is useful only when it is supported by current inventories, documented ownership, network visibility and tested incident procedures. Unknown engineering workstations, unmanaged remote links and unsupported controllers can undermine segmentation and response even when governance frameworks appear complete.
Operators can begin by reconciling discovery data with approved asset registers, assigning a business owner to every device and recording software, support and recovery dependencies. The benchmark reinforces a recurring theme in Cyber-Physical Security: resilience depends on knowing which systems exist, how they communicate and which operational consequences follow when they fail.
Leave a Reply