SANS 2026
State of ICS/OT Security Survey
REPORT

SANS 2026
State of ICS/OT Security Survey

Industrial Cyberthreats Reach Unprecedented Levels

One in three respondents reported an ICS/OT incident this year, the largest single-year jump in the survey’s history. The SANS 2026 State of ICS/OT Security Survey asks the question every industrial operator needs answered.

1.7x

Increase in Incidents Since 2025

In addition to this increase, the impact on safety nearly doubled.

72%

Of OT Incidents Caused Downtime

Only 15% of respondents could keep operations running manually for more than 48 hours.

34%

Jump in Incident Rates

The largest increase in the survey’s history.

Retrospectives on Industrial Cyber Incidents

Review past reports’ incident response data from the perspective of failed controls and external pressure.

Retrospectives on Industrial Cyber Incidents

Understand Current Threats and Detection Capabilities

Gain more insights into leveraging threat intelligence and visibility across IT and OT systems.

Understand Current Threats and Detection Capabilities

Prepare for Cyber Resilience, Response, and Recovery

See what works according to the data and why detection is no longer sufficient.

Prepare for Cyber Resilience, Response, and Recovery

Build Cyber Resilience According to Real-Life Data

Get the full SANS 2026 State of ICS/OT Security Survey report and see how ICS/OT teams are detecting, containing, and recovering from incidents.