- The state of cybersecurity is poor, yet it underpins critical infrastructure like oil, gas, and electricity.
- Industrial IT systems, traditionally isolated and reliable, are increasingly merging with vulnerable office IT and cloud services.
- Outdated industrial systems rarely receive security updates, creating risks when connected to external networks.
- Legal tools exist for financial risks but lack equivalent frameworks for cybersecurity in operational IT.
- Mandating timely security updates, disconnecting vulnerable systems from the internet, and using data diodes can mitigate risks.