Since 2017, the annual State of ICS/OT Cybersecurity survey has offered key insights and benchmarks for industrial cybersecurity programs worldwide. This year’s report continues that tradition. Based on inputs from over 530 professionals across multiple critical infrastructure sectors, it provides actionable guidance as to how organizations can manage industrial cyber risk effectively. The SANS 2024 State of ICS/OT Cybersecurity report is structured around the SANS Five ICS Cybersecurity Critical Controls, offering practical insights applicable to ICS/OT programs regardless of size, budget, or sector.1 As industrial environments evolve, driven by increased threats, regulatory requirements, and IT–OT integration, the need for a resilient and adaptive security posture is more critical than ever.