Honeywell Report Finds OT Security Confidence Outpaces Asset Visibility
Summary
Honeywell’s 2026 OT cybersecurity report surveyed 603 leaders. While 88% described their programs as mature or design-led, 21% had a complete OT asset inventory; AI tools were common, but autonomous use remained limited.
Key points
- The survey covered 603 leaders across critical infrastructure sectors and regions.
- Although 88% rated their OT security programs as mature or design-led, only 21% maintained a complete OT asset inventory.
- OT was fully integrated into a centralized security operations center for 33% of respondents; 20% continuously monitored more than three-quarters of connected IoT devices.
- Respondents affected by a significant OT cybersecurity incident reported an average of 16.2 hours of downtime.
- Ninety-one percent of energy and utilities respondents and 87% of maritime respondents reported a significant OT incident in the past 12 months, compared with 54% in oil and gas.
- AI tools were used for threat detection by 72% of respondents, continuous monitoring by 68%, and asset inventory by 59%.
- While 99% expected AI to affect OT security operations within two to three years, 23% currently used autonomous or agentic AI for threat detection.
Article Details
- Publisher
- Honeywell
- Report Period
- 2026
- Scope
- OT cybersecurity and AI adoption among leaders in critical infrastructure sectors across the Americas, EMEA, and APAC.
- Sample Size
- 603 surveyed leaders
- Key Statistics
- 88% of respondents rated their OT security programs as mature or design-led, while 21% reported a complete OT asset inventory.
- 33% said OT was fully integrated into a centralized security operations center; 20% continuously monitored more than three-quarters of connected IoT devices.
- Respondents affected by a significant OT cybersecurity incident reported an average of 16.2 hours of downtime; among them, 21% estimated downtime costs above $100,000 per hour and 4% above $500,000 per hour.
- In the past 12 months, significant OT cybersecurity incidents were reported by 91% of energy and utilities respondents, 87% of maritime respondents, and 54% of oil and gas respondents.
- 99% expected AI to affect OT security operations within 2–3 years; 23% currently used autonomous or agentic AI for threat detection.
- Recommendations
- Establish clear decision rights, human oversight, and testing that accounts for the operational consequences of incorrect AI responses.
Industries
EnergyRespondents worked across critical infrastructure sectors, including energy, oil and gas, healthcare, maritime, and manufacturing, with participation spanning the Americas, EMEA and APAC regions.HealthcareRespondents worked across critical infrastructure sectors, including energy, oil and gas, healthcare, maritime, and manufacturing, with participation spanning the Americas, EMEA and APAC regions.ManufacturingRespondents worked across critical infrastructure sectors, including energy, oil and gas, healthcare, maritime, and manufacturing, with participation spanning the Americas, EMEA and APAC regions.MaritimeRespondents worked across critical infrastructure sectors, including energy, oil and gas, healthcare, maritime, and manufacturing, with participation spanning the Americas, EMEA and APAC regions.Oil and gasRespondents worked across critical infrastructure sectors, including energy, oil and gas, healthcare, maritime, and manufacturing, with participation spanning the Americas, EMEA and APAC regions.