As utilities undergo rapid digitalisation, modernising grids, integrating renewables, and automating field operations, cybersecurity risks are expanding just as fast. Operational Technology (OT), the critical systems controlling physical infrastructure, is now a prime target for both financially motivated attackers and state-sponsored threat actors.

The cost of inaction is steep. A single OT cyber intrusion can cause widespread outages, compromise safety, and erode public trust. For the utilities sector, securing OT isn’t just a technical issue, it’s a business imperative.

The Cyber Threat Is Escalating. The 2025 State of Operational Technology and Cybersecurity Report reveals a troubling trend:

• 60% of organisations experienced intrusions affecting both IT and OT environments, a steep rise from 49% in the previous year.
• Even with improved maturity, 50% of companies still experienced at least one intrusion in the past year.

Utilities, with legacy infrastructure and complex vendor ecosystems, are particularly vulnerable. Many ICS and SCADA systems were never designed to operate in today’s hyperconnected environments, leaving security blind spots that attackers are increasingly exploiting.

OT Security Maturity Is Growing, But Gaps Remain

There’s good news: more organisations are investing in OT cybersecurity maturity. Nearly half now rate their security process maturity at Level 4, where processes are continuously improved using threat intelligence and incident data.

Yet, solution maturity still lags. Most companies are only just establishing user profiling and access controls. Only a small percentage have reached predictive behaviour monitoring or automated response, critical capabilities for modern utilities operating under 24/7 service expectations.

How NEC Helps Utilities Secure What Matters Most

NEC is working closely with Fortinet to help Australian utilities bridge this OT cybersecurity gap. Through a tailored campaign and solution framework, NEC empowers utility providers to take control of their cyber posture.

Key Offerings:

• Cyber Threat Assessment Program (CTAP): Delivered in partnership with Fortinet, this week-long assessment identifies vulnerabilities in OT environments, analyses remote access connections, monitors network traffic, and provides tailored recommendations.
• Specialist Enablement: NEC and Fortinet’s joint go-to-market strategy includes dedicated OT-certified solution experts across VIC, NSW, SA, and WA. This ensures regional coverage and industry-aligned support for utility providers.
• Scalable Architecture: By leveraging Fortinet’s platform-based approach, enabled and supported by NEC—utilities gain improved visibility, segmented network zones, and secure remote access, all managed through a centralised platform.

This reduces complexity and improves cyber resilience without compromising operational continuity.

Why This Matters for Utility Leaders

Cybersecurity is now boardroom business. In 2025, 52% of organisations have placed OT security under the CISO, up from just 16% in 2022. This shift to executive ownership signals growing awareness of the operational and reputational risks at stake.

Moreover, with looming regulatory reforms and heightened compliance expectations across Australia’s critical infrastructure sectors, taking a proactive, integrated approach to OT security is no longer optional.

A Call to Action

Utilities can’t afford to treat OT security as a back-office concern. The stakes, public safety, national energy resilience, and customer trust, are too high. NEC is here to help.

If you're a utility provider looking to:

• Modernise legacy ICS and SCADA systems
• Understand and reduce cyber risk in your OT network
• Comply with new industry standards and regulations
• Build a long-term, scalable OT security strategy

Get in touch to arrange a Cyber Threat Assessment with NEC and Fortinet. Let’s secure the future of energy, together.

Request an OT Assessment