2025 OT Security Financial Risk Report

This study is a groundbreaking investigation into the financial impact of cyber incidents involving operational technology (OT) assets and provides important estimation of potential future OT cyber breach losses, as analyzed by insurance statisticians.

More critically, the study applies statistical modeling to identify and quantify the most influential OT cyber risk controls and their potential risk reduction impact. The statistical analysis referenced in this report is based on data compiled and modeled by the Marsh McLennan Cyber Risk Intelligence Center (CRIC), Marsh McLennan’s enterprise-wide global cyber data, analytics, and modeling center of excellence.

The proprietary data and models used are based on the past 10 years of information security events and claims, drawn from some of the largest insurance claims databases in the world.