2021 SANS OT/ICS Cybersecurity Survey Report

This document is a report on the 2021 SANS OT/ICS Cybersecurity Survey, which received 480 responses from various industry sectors. The survey aims to explore how operational technology (OT) and industrial control system (ICS) defenders address cybersecurity challenges. It highlights the rise of ransomware as a significant threat, particularly following high-profile incidents like the Colonial Pipeline attack. The report details the perceived risks, investment levels, and operational challenges faced by organizations in securing their critical infrastructure. Key findings include an increase in budget allocations for ICS cybersecurity, a growing number of dedicated ICS cybersecurity professionals, and the adoption of the MITRE ATT&CK framework. The report also discusses the challenges related to technology integration, workforce shortages, and the need for improved processes in cybersecurity efforts. Overall, while there has been progress in securing ICS environments, significant challenges remain in areas such as asset management and incident detection.