Late in 2023 we started a conversation with OPSWAT, a cybersecurity vendor focused on the critical infrastructure sector, on undertaking a research project to assess the email security posture of critical infrastructure organizations. We have had the opportunity to do many research projects on email security in recent years, but while the others have included organizations in the critical infrastructure sector, this was the first project that focused exclusively on this cohort. Exciting times!<\/p>\n\n\n\n
The research programme:<\/p>\n\n\n\n
Once the research design was agreed, we worked on the survey questions, took this to field, and analyzed the data. You can get your copy of the results from the OPWAT website<\/a>. But here’s a preview:<\/p>\n\n\n\n A major recommendation in the report is finding email security capabilities that “preclude and prevent threats” from finding their way into an organization’s email system. While this is critical for critical infrastructure organizations, it is no less so for those in other sectors.<\/p>\n\n\n\n\n
80% of critical infrastructure entities fell prey to email-related security breaches within the past 12 months, highlighting their attractiveness to cyber threat actors.<\/li>\n\n\n\n
Despite advancements in cybersecurity, 48% of organizations lack confidence in their existing email security defenses, leaving them vulnerable to potentially devastating cyberattacks.<\/li>\n\n\n\n
Shockingly, 65% of organizations are not compliant with regulatory standards, exposing themselves to significant operational and business risks.<\/li>\n<\/ul>\n\n\n\n