The Limited AI Integration in Operational Technology and ICS Industries: Insights from Recent Research

Understanding the AI Landscape in OT and ICS

In a recently released report, titled "State of AI in OT Cybersecurity 2026," Nozomi Networks and BlastWave, backed by Takepoint Research, have shed light on the current adoption of artificial intelligence (AI) within the operational technology (OT) and industrial control systems (ICS) sectors. While a significant majority of surveyed organizations express interest in AI applications for enhancing cybersecurity, the actual deployment figures tell a different story, revealing notable gaps that need attention.

Key Findings from the Report

The survey analysis revealed that approximately 87.7% of respondents are currently engaged in some capacity with AI for OT cybersecurity—be it through active use, evaluation, or pilots. However, the stark reality is that only 7.9% have managed to implement AI solutions across multiple functions effectively. This reflects a broader hesitation within the industry to fully embrace AI capabilities despite recognition of its potential benefits.

An impressive 69.9% of those surveyed confirm the advantages of AI in industrial cybersecurity outweigh associated risks. Additionally, of those believing in the benefits of AI, about 49% acknowledge that there are material risks involved, such as concerns regarding data integrity, reliability, and the necessity for human oversight in deploying AI systems successfully.

Urgent Need for AI in Defensive Strategies

Edgard Capdeveille, the CEO of Nozomi Networks, emphasized the criticality of integrating AI into cybersecurity practices, especially as adversaries are leveraging AI technology to launch more sophisticated and accelerated attacks against OT and ICS environments. Capdeveille’s remarks echo a pressing warning that defenses must adapt through AI to effectively counter these evolving threats. Tom Sego, CEO and co-founder of BlastWave, supports this view by advocating for a strategic perimeter that acknowledges potential adversary use of AI.

The report further indicates that AI deployment is most prevalent in areas requiring immense data processing capabilities. The prominent functions for AI utilization include threat detection and alerting (33.8%) and network monitoring (31.5%). Organizations appear to focus their initial AI integrations on streams that provide the most value by alleviating the workload on cybersecurity professionals.

Concerns Over AI-Related Risks

Interestingly, the report identifies rising concerns regarding the physical implications of AI-related attacks. About two-thirds of the surveyed professionals consider such attacks as either critical operational threats (20.5%) or as emerging issues that require proactive measures (43.4%). Despite this recognition, only 7.6% reported having confidence in the current safeguards protecting AI tools and systems against potential manipulation and adversarial threats.

Jonathon Gordon, Directing Analyst at Takepoint Research, highlights the struggle organizations face when trying to implement AI solutions effectively and securely. He emphasizes the need for companies to navigate these waters carefully to avoid ceding too much authority to AI systems that lack the necessary checks and operational safeguards.

The Path Ahead for AI in OT and ICS

As companies begin to strategize their AI adoption, it's evident they are at a crossroads. The findings illustrate a clear interest in AI technology, yet there is a challenging path ahead for OT and ICS sectors to engage these systems effectively and safely. The organizations that successfully expand AI use in the upcoming months may be the ones who establish operational protocols that allow for the integration of AI without compromising safety or control.

In summary, although AI has the potential to transform cybersecurity measures in operational technology, its current deployment remains limited. For the industry to thrive in this AI era, decisive steps must be taken to ensure that AI systems are not only adopted but also implemented with care and thorough oversight, allowing the benefits to materialize without succumbing to the inherent risks associated with technological advancement.