SANS State of ICS/OT Security 2025

Since 2017, the SANS State of ICS/OT Security Survey has tracked the practices, challenges, and progress of organizations securing critical infrastructure worldwide. Over nearly a decade, these annual benchmarks have documented how the industry has matured—from ad-hoc protection measures to more structured programs shaped by regulation, threat intelligence, and incident response lessons learned.

This paper presents the latest findings from the SANS State of ICS/OT Security Survey, highlighting how critical infrastructure organizations are adapting to rising threats, expanding regulatory mandates, and an increasingly complex operational landscape.

Drawing on responses from 330 industry professionals, the report explores the state of ICS/OT security through three lenses: past trends, current practices, and future plans—offering practitioners, executives, and policymakers a clear view of progress, gaps, and the actions needed to build sustainable, resilient operations.