Based on responses from more than 330 cybersecurity professionals, this infographic highlights five findings from the 2025 SANS State of OT Security. Mandatory compliance now affects 58% of organizations, yet evidence collection remains difficult. Only one in eight organizations has visibility across the entire ICS Cyber Kill Chain, while just 10% report full visibility at Purdue Level 2. Threat intelligence remains underused, with 21% deploying integration despite organizations using it being 52% more likely to improve monitoring and segmentation. Although 57% have OT-specific incident response plans, recovery still lags, while organizations with plans report 1.7 times better preparedness. Asset visibility remains the top investment priority, with 50% investing in inventory and visibility

Join for free to read