Global Tensions Heighten Supply Chain and Infrastructure Security Risks
Nearly half of security professionals say global economic policies and geopolitical tensions are increasing cyber risks to critical infrastructure.
A new report titled The Global State of CPS Security 2025: Navigating Risk in an Uncertain Economic Landscape reveals growing cybersecurity challenges tied to shifting global supply chains and economic policies.
Based on insights from 1,100 professionals across cybersecurity, operational technology, clinical engineering, and facilities management, the study found that 49% of respondents believe supply chain changes driven by global economic and political tensions are increasing risks to cyber-physical systems (CPS).
Rising Third-Party and Geopolitical Risks
According to the report, 67% of organizations are reconsidering the geographic structure of their supply chains to minimize CPS-related risks. However, these realignments are introducing new vulnerabilities—particularly around third-party remote access.
46% of respondents reported experiencing a security breach in the past year due to third-party access.
54% discovered security gaps in vendor contracts following such incidents.
As a result, 73% of organizations are now re-evaluating third-party access to their CPS operations.
Regulatory Pressure Mounts
Adding to the complexity is a wave of regulatory uncertainty. Nearly 70% of organizations said their CPS security strategies currently align with frameworks such as the NIST Cybersecurity Framework and Europe’s ENISA, yet 76% expect new or emerging regulations to require major changes to their security programs — potentially disrupting operations.
Expert Insight
“Attackers often see times of instability as opportunities to strike. Distracted defenders are ineffective defenders,” said Sean Tufts, Field Chief Technology Officer at Claroty. “Economic uncertainty and geopolitical tensions are making it harder for security teams to protect critical systems, and third-party vulnerabilities are further driving up risk. While the challenge is great, the opportunity to transform CPS security approaches is even greater.”
Strengthening CPS Resilience
The report urges organizations to adopt impact-focused security strategies, including:
Conducting regular CPS security audits, implementing stricter change approval and vendor oversight processes, and enhancing collaboration between IT, OT, and supply chain teams to close risk gaps.
These steps, the report concludes, will be key to ensuring resilience, maintaining compliance, and protecting supply chain operations amid increasing global uncertainty.
