State of Critical Infrastructure Security 2023 Survey Report

This document is a survey report that presents findings on the state of critical infrastructure security in 2023. It outlines the increasing threats faced by industrial organizations, highlighting significant incidents that have raised awareness of cybersecurity vulnerabilities. The report details the maturity levels of device security programs among industrial equipment manufacturers, revealing that only 30% of respondents believe their organizations have mature security programs. It also discusses the challenges of managing product security amidst evolving technologies and the need for comprehensive security platforms. The report identifies compliance with regulations as a top priority for manufacturers, with 37% emphasizing its importance in their security roadmaps. Additionally, it notes a reluctance to increase product security budgets despite recognizing the challenges, with over half of the surveyed companies not planning to allocate more resources. The findings underscore a limited focus on software supply chain security, despite its critical role in overall device security.