Survey reveals cyber incidents cost firms up to $500,000 per hour despite widespread overconfidence in system readiness.
Industrial organisations are facing a significant disconnect between perceived operational technology (OT) cybersecurity maturity and practical readiness, according to the 2026 OT Cybersecurity Benchmark Report published by Honeywell Technologies.
The study, which surveyed over 600 global cybersecurity, compliance, and operations leaders across critical infrastructure sectors, found that 88 per cent of respondents described their OT security programmes as mature. However, only 21 per cent reported possessing a complete inventory of their OT assets, while just 33 per cent have fully integrated OT into a centralised security operations centre. Furthermore, only 20 per cent continuously monitor connected Internet of Things (IoT) devices such as sensors and cameras.
Unplanned downtime resulting from major cyber incidents averaged 16.2 hours, with financial losses reaching up to $500,000 per hour. Sector-specific data revealed widespread vulnerability, with 91 per cent of energy and utilities firms, 87 per cent of maritime operators, and 54 per cent of oil and gas respondents reporting a significant OT cyber incident over the past 12 months. In healthcare, only 19 per cent of respondents stated that facility and building systems were fully integrated into security monitoring.
Looking ahead, 99 per cent of respondents expect artificial intelligence to impact OT security within two to three years, yet only 23 per cent currently employ autonomous or agentic tools for threat detection. Jim Masso, President and CEO of Honeywell Technologies Process Automation, emphasised that extending visibility across all connected systems is essential for business continuity, as cyber disruptions increasingly affect physical operations, employee safety, and production.
