Dragos report estimates up to $330bn in global OT cyber risk

0
106

Dragos Inc., a company specialising in cybersecurity for operational technology (OT) environments, has released its 2025 OT Security Financial Risk Report, produced with Marsh McLennan’s Cyber Risk Intelligence Center.

The report applies statistical modelling to estimate the financial impact of OT cyber incidents and evaluate the effectiveness of selected security controls. It is intended to give executives, insurers, and security teams data to better assess and address financial exposure.

The study indicates that indirect losses—often excluded from standard models—account for as much as 70% of OT-related breaches.

In its most severe modelled scenario, described as a 1-in-250-year event, worldwide OT cyber losses could reach $329.5 billion, with $172.4 billion attributed to business interruption.

Based on an analysis of a decade’s worth of breach and insurance claims data, the report identifies certain controls as having the strongest correlation with reduced losses: incident response planning, defensible architecture, and ICS network visibility and monitoring.