September 26, 2025
September 26, 2025
Many security professionals believe that economic instability, geopolitical tension, and changing supply chains are increasing risk for cyber-physical systems (CPS). Nearly half say global policies or tensions heighten risks, and a large portion are unsure about their ability to reduce risk or truly understand their current CPS risk posture. As supply chains shift, remote and third-party vendor access is becoming more concerning: companies are rethinking who they work with and how—and many have already experienced breaches via vendor remote access or found weaknesses in contracts after incidents.
Regulations are driving uncertainty too. A majority say their CPS security programs meet current standards, but many expect new or evolving mandates will force them to revisit and possibly overhaul their strategies. To manage these growing risks, organizations are leaning toward approaches that focus on impact (i.e. how threats affect operations or business outcomes), not just technical vulnerabilities. Key mitigation strategies include regular security audits, stricter control over change approvals, and leveraging AI/ML tools for threat detection, response, and assessing exposures especially in third-party or remote access scenarios.