Rockwell Automation’s latest global research report, Operational Resilience in the Age of Connectivity, highlights a major shift in industrial organizations’ priorities: cybersecurity is no longer viewed as only an IT concern but as a fundamental factor affecting production continuity, operational safety and long-term business growth.
Based on feedback from more than 1,500 manufacturing and industrial decision makers across 17 countries, the study shows that companies are increasing cybersecurity investments as industrial networks become more connected through digital transformation, artificial intelligence (AI), cloud technologies and IT/OT integration.
From an industrial automation perspective, this trend reflects a significant change in how companies manage control systems. Modern factories depend heavily on PLCs, DCS platforms, industrial networks and intelligent field devices. As more operational assets exchange data with enterprise systems, cybersecurity protection becomes directly connected with equipment availability and process stability.
Cybersecurity Risk Is Emerging as a Major Industrial Growth Barrier
The research indicates that more than one-third of industrial organizations consider cybersecurity risk one of the largest external challenges affecting future growth.
Traditional industrial environments were often isolated from external networks, with operational technology (OT) systems designed primarily for reliability and process control. However, modern manufacturing strategies increasingly require real-time data access, remote monitoring, predictive maintenance and enterprise-level analytics.
This connectivity improves operational visibility but also introduces additional entry points for cyber threats. Industrial assets that were previously independent, such as controllers, HMIs, SCADA systems and industrial communication networks, are now becoming part of larger digital ecosystems.
In my view, the key challenge for industrial companies is not simply preventing cyberattacks. The more important objective is maintaining stable production processes when unexpected events occur. A cybersecurity strategy should therefore be designed around operational continuity rather than only network protection.
High Confidence Does Not Always Mean High Operational Resilience
The study reveals an interesting gap between cybersecurity confidence and actual incident exposure.
Although 90% of surveyed organizations expressed confidence in their ability to prevent, contain or recover from cyber incidents, 46% reported experiencing a cyber incident within the previous year.
This difference suggests that many companies have established cybersecurity programs but still face challenges in applying those measures effectively across complex industrial environments.
Industrial cybersecurity requires a different approach compared with conventional enterprise IT security. A production shutdown caused by a compromised industrial controller, communication failure or unauthorized configuration change can directly impact manufacturing output, equipment availability and personnel safety.
For automation engineers, cybersecurity must become part of system design, including controller architecture, network segmentation, access management, firmware management and lifecycle maintenance.
Cybersecurity Investment Continues to Increase Across Industrial Organizations
According to the report, 62% of organizations have already invested in cybersecurity platforms, and cybersecurity ranks among the highest-return technology investments identified by respondents.
Industrial companies are increasingly allocating resources toward solutions such as:
- Industrial network monitoring
- Security assessment services
- Threat detection platforms
- Secure remote access solutions
- Identity and access management
- OT asset visibility tools
However, investment alone does not automatically create resilience. The effectiveness of cybersecurity depends on how well protection measures are integrated into daily industrial operations.
A mature industrial cybersecurity program should combine technology, engineering practices and operational procedures. For example, protecting a PLC network requires not only security software but also proper configuration control, backup strategies, patch management and trained personnel.
AI Adoption Creates New Possibilities for Industrial Cybersecurity
The research shows that 45% of organizations plan to apply artificial intelligence and machine learning technologies to cybersecurity initiatives within the next 12 months.
AI can support industrial cybersecurity by improving:
- Abnormal network behavior detection
- Threat identification
- Security event analysis
- Risk monitoring
- Incident response efficiency
For industrial automation environments, AI-based cybersecurity tools may help identify unusual communication patterns between controllers, servers and field devices before they affect production.
However, AI should not replace engineering judgment. Industrial systems often have unique operating conditions, long equipment lifecycles and strict process requirements. Effective implementation requires combining AI capabilities with knowledge of automation architectures and manufacturing processes.
IT/OT Convergence Expands Both Risk and Business Opportunities
The integration of information technology (IT) and operational technology (OT) is one of the most important developments in modern manufacturing.
The report identifies IT/OT integration points as one of the most vulnerable areas for cyber incidents. At the same time, 37% of organizations believe securing IT/OT architecture will create positive business outcomes over the next five years.
The reason is clear: connected industrial systems allow companies to improve production efficiency, analyze operational data and optimize decision-making.
Examples include:
- Connecting PLC data with enterprise analytics platforms
- Using cloud services for equipment monitoring
- Implementing predictive maintenance systems
- Applying digital twins for process optimization
The challenge is maintaining a balance between accessibility and security. Industrial networks must provide sufficient data availability while preventing unauthorized access to critical control systems.
Building Cyber Resilience Requires a Lifecycle Approach
Operational resilience is not achieved through a single cybersecurity product or project. It requires continuous management throughout the entire industrial asset lifecycle.
A complete approach should include:
- Cybersecurity assessment during system design
- Network architecture planning
- Secure device configuration
- Regular vulnerability management
- Backup and recovery procedures
- Employee cybersecurity training
- Continuous monitoring and improvement
For legacy automation systems, this becomes even more important. Many industrial facilities continue operating PLCs, DCS controllers and communication modules that were designed before modern cybersecurity threats existed.
Updating protection strategies while maintaining compatibility with existing automation infrastructure remains a key engineering challenge.
Industrial Cybersecurity Will Shape the Future of Automation
The findings from Rockwell Automation’s research demonstrate that cybersecurity has become a core component of industrial transformation. As factories become more connected and intelligent, protecting automation systems is directly linked with production reliability, safety and business performance.
The future industrial environment will require closer cooperation between automation engineers, IT security specialists and operational teams. Cybersecurity can no longer be treated as a separate technology layer; it must become part of industrial architecture planning from the beginning.
For manufacturers adopting smart factory technologies, the question is not whether connectivity will increase, but how securely that connectivity can be managed.
