Exposure of Industrial Control Systems Worldwide

This report documents the identification of nearly 100,000 exposed industrial control systems (ICS) across various organizations globally. The increasing willingness of both opportunistic and advanced cyber threat actors to target industrial and operational sites has prompted companies like Schneider Electric to collaborate with Bitsight in enhancing industrial security. The document outlines the types of ICS, their functions, and the potential risks associated with their exposure to the public internet. It highlights the significance of ICS in managing critical infrastructure, which includes power grids and water systems. The research indicates a general decline in exposed ICSs since mid-2018, although the numbers remain concerning. It also presents an analysis of the geographic distribution and sector-specific details of exposed systems, urging organizations to conduct assessments and remediation efforts to mitigate risks. The findings emphasize the need for heightened awareness and proactive security measures among organizations.