Why OT Cybersecurity Is Moving to the CISO’s Desk—and What That Means for Manufacturers

Responsibility for securing operational technology (OT) in manufacturing is shifting to the CISO. According to recent threat intelligence reports, manufacturers are among the most targeted by ransomware groups and among the most likely to pay high ransoms, because halted production directly threatens revenue. CISOs now bring strategic oversight, budget authority, and enterprise risk integration to OT security decisions.

This shift isn’t just administrative—it’s architectural. It signals a broader move toward centralized, standardized, and risk-aware approaches to securing everything from PLCs to remote access tunnels. And it comes with both opportunities and growing pains.

Why Are Manufacturers a Top Ransomware Target?

Manufacturers face a distinct risk profile: production downtime is a direct revenue threat, more than an operational inconvenience. According to recent threat intelligence reports, manufacturers are among the most targeted by ransomware groups and most likely to pay high ransoms because halted operations create intense pressure to restore systems quickly. Preventive OT security is a financial priority, beyond compliance alone.

This is where CISOs are stepping in. They’re bringing strategic oversight, budget authority, and a more integrated view of enterprise risk. But they’re also learning that applying traditional IT controls to industrial environments doesn’t always work.

Why Does OT Security Require a Different Approach?

OT environments operate under constraints that standard IT security practices cannot address. Maintenance windows may occur once every few years. Systems cannot always be patched on schedule. Downtime is not an option. And plant-floor operators are focused on production, not security.

To bridge this gap, leading manufacturers are appointing OT security champions—people who understand both plant floor realities and cyber frameworks. These roles often sit within the security team but speak the language of operations. They help translate strategy into plant-friendly policies, without disrupting safety or production goals.

How Do CISOs and OT Leaders Share Security Ownership?

A shared-ownership model is emerging in manufacturing, where the CISO sets the strategic direction and execution is rooted in cross-functional partnership. This means joint planning with OT leaders, clear communication about the reasoning behind security controls, and adjustments to frameworks such as NIST and CIS Controls to account for industrial constraints.

Modern CISOs are also leaning on trusted technology partners—vendors who can provide visibility, not just alerts; and controls, not just compliance reports. This platform-based approach, rather than a scattered set of point tools, is proving to be more effective for managing risk across both IT and OT domains.

What Is at Stake for OT Security in Manufacturing?

OT cybersecurity integration into enterprise security is a necessity, not a trend. Manufacturers that succeed will treat OT security as a core element of risk management led at the CISO level, rather than a standalone project. The next major incident will prompt questions about who was responsible and whether governance was in place, beyond where the breach occurred.