Federal Experts Warn of Increased Cybersecurity Risks from IT-OT Convergence

The Cyber Leaders Exchange 2026 recently convened a group of federal and industry experts who addressed a burgeoning concern in the realm of cybersecurity: the convergence of information technology (IT) and operational technology (OT). This linkage is rapidly evolving, and with it, the associated cybersecurity risks, which could have profound impacts on our nation’s critical infrastructure. As systems become increasingly interconnected, vulnerabilities that were once isolated are now exposed, potentially jeopardizing essential services and public safety.

During the conference, participants discussed how the integration of IT and OT environments is expected to drive a significant growth in the cybersecurity market, projecting it to reach $151 billion by 2030. This figure not only underscores the need for enhanced cybersecurity measures but also reflects a substantial market opportunity for companies focused on OT cybersecurity solutions. Specific areas of demand highlighted include threat detection, secure system architecture, third-party risk management, and the development of a cross-functional workforce adept in both domains.

A substantial implication for procurement teams is the necessity to adapt their strategies to incorporate these crucial areas when acquiring technologies aimed at safeguarding critical infrastructure. The call for advanced capabilities in OT protection, threat detection, and secure architecture is not just a recommendation but a clear signal of a shifting landscape in which vulnerabilities must be effectively managed.

As organizations increasingly pursue efforts to bolster their cybersecurity postures against the backdrop of IT-OT convergence, contractors that specialize in these areas could experience growing demand for their offerings. Enhancing workforce capabilities that bridge the gap between cybersecurity and operational requirements will be essential, as highlighted in the insights shared at the conference. The overarching concern is that while organizations may excel in their individual operational tasks, they might lack a comprehensive understanding of the full spectrum of risks that exist across their interconnected systems. Scott Bowman, Technical Lead for Cyber-Physical Systems at Idaho National Laboratory, pointedly commented, "But I think one of the biggest threats is that our organizations that do this work very well day-to-day, they may not have a complete understanding of the entire risk across their operations."

While this discussion reveals a significant market need, it is critical to note that there are currently no specific procurement opportunities or deadlines publicized. Instead, this serves to guide market positioning and strategic requirements planning for companies looking to enter or expand their footprint in this sector. Therefore, contractors may benefit from proactively adapting their offerings and engaging with potential clients to address these emerging risks.

As the threat landscape evolves, procurement professionals must remain vigilant and consider how they can integrate these important cybersecurity capabilities into their sourcing strategies to ensure the protection of critical infrastructure in a converging IT-OT environment.

• Procurement teams can leverage identified capabilities to shape requests for OT cybersecurity solutions.
• Demand for threat detection and secure architecture is poised to grow significantly.
• Contractors that bridge cyber and operational functionalities may gain a competitive advantage.
• No immediate procurement opportunities discourage hasty bids, allowing for thoughtful market analysis.
• CISA, Idaho National Laboratory, and other agencies play pivotal roles in addressing these challenges.
• AppGate and General Dynamics Information Technology are prominent vendors in the field.