According to a survey by Kaspersky, 99 percent of Belgian companies in the industrial sector suffered a cyber incident last year.

According to a Kaspersky survey of manufacturing, oil, gas and energy companies, almost all Belgian industrial companies faced a cyber incident last year. In 50 percent, two to three attacks led to operational failures. Additionally, a third of respondents say the complexity of OT environments is a major challenge. These figures show that there is a lack of preventive measures.

Multiple attacks and downtime

Most affected companies were attacked multiple times. In 50 percent, two to three attacks led to operational failures. This happened once in a third of companies and 15 percent reported four to five incidents. These numbers indicate a lack of preventive measures. Despite the large impact of downtime, mitigation remains the most important approach.

The survey shows that 85 percent of executives consider downtime to be their biggest concern. Other top concerns include physical security breaches and insider threats, both cited by 24 percent of respondents. Additionally, unauthorized access and data theft (22 percent) are concerns, as is a lack of network visibility (22 percent).

Complexity of OT environments

A third of respondents say that the complexity of operational technology (OT) and industrial control systems represents a major challenge. OT, which is critical to managing physical processes and machines, appears to be particularly vulnerable to targeted cyberattacks. These attacks can have serious consequences, including disruptions to production lines and threats to critical infrastructure.

In addition, 35 percent find it difficult to quantify cyber risks, such as their impact on production and reputation. Only 20 percent see lack of time as a barrier, suggesting that complexity and lack of insight are the main barriers to effective security.

Dangers of “security through darkness”

According to Jornt van der Wiel, security expert at Kaspersky, companies often underestimate their vulnerability because they believe that their non-standard systems provide protection. However, cybercriminals can quickly access manuals and information to carry out targeted attacks. This highlights the need for a better security strategy.

The survey, conducted in August 2024, involved 802 C-level decision makers from Belgium, the Netherlands and the United Kingdom, including 201 Belgian respondents. The report highlights that industrial companies need to invest more in proactive cybersecurity to prevent serious damage.