2020 Control System Cyber Security Annual Report

Each Report is the culmination of a year-long research project led by the Control System Cyber Security Association International and draws on input from our global membership and thousands of others in our extended (CS)²AI community.

Based in decades of Control System (CS) security survey development, research and analysis led by (CS)²AI Founder and Chairman Derek Harp and Co-Founder and President Bengt Gregory-Brown, and backed with the support and resources of our Global Advisory Board members, the (CS)²AI Fellows, our Strategic Alliance Partners (SAPs), and many other SMEs.
We asked key questions about personal experiences in the front lines of operating, protecting, and defending Operational Technology (OT) systems and assets costing millions to billions in capital outlay, impacting as much or more in ongoing revenues, and affecting the daily lives and business operations of enterprises worldwide. Over five hundred and fifty of them responded to our primary survey and many others participated in numerous secondary data gathering tools which we run periodically.

This pool of data, submitted anonymously to ensure the exclusion of organizational politics and vendor influences, has offered insights into the realities faced by individuals and organizations responsible for CS/OT operations and assets beyond what could fit into this Report.

We hope the details we have selected to include serve the decision support need we set out to answer.