Two-thirds of energy professionals report their leadership views cybersecurity as their greatest business risk, with 71% expecting increased cybersecurity investment this year, according to DNV Cyber's latest Energy Cyber Priority report.
The research reveals improved cybersecurity awareness, with 78% of professionals confident in their leaders' understanding of cyber risks. Employee preparedness has strengthened, as 84% report knowing how to respond to potential threats. Notably, 67% expect greater investment in operational technology security in the coming year.
"Achieving the energy transition is central to society at large. The whole energy sector – companies and governments alike – are working together on this massive challenge, which is increasingly complex because the technologies underpinning the transition are largely digital and scaling rapidly," said energy systems CEO Ditlev Engel.
Geopolitical tensions stirred concerns regarding cybersecurity for 75% of organisations. Concern about foreign power attacks likewise rose to 72% from 62% in 2023, while cyber-criminal gangs are considered a threat by 79% of organisations, up from 50%.
Meanwhile, threats from malicious insiders also grew, with concern rising from 51% to 62% year-on-year.
"Even as the energy industry becomes more mature in its cybersecurity posture, it must continue to strengthen and adapt to remain resilient against a growing number of increasingly sophisticated threats," said industrial and OT cybersecurity director Auke Huistra.
The report identifies five principal challenges facing energy companies: securing physical infrastructure, overcoming complex cybersecurity supply chains, enhancing employee vigilance, embedding new skills in the workforce, and embracing AI.
Notably, 71% of professionals acknowledge increased vulnerability to operational technology cyber events, up from 64% in 2023.
Supply chain security remains a significant concern, with only 16% of professionals very confident in their organisation's visibility of supply chain vulnerabilities.
Additionally, 76% worry that cybersecurity training isn't advanced enough to prepare for sophisticated attacks, while 66% note that AI-powered phishing has made threat detection more challenging.
Is our energy sector ready to face cybersecurity risks? Share your thoughts below.
