ANNUAL RESEARCH REPORT

 

Half of Europe’s industrial organisations have already experienced cyber incidents linked to legacy systems

 

New 2026 research from 550+ OT and security leaders reveals why legacy assets remain exposed — and what organisations are doing about it

Download the 2026 OT Cybersecurity ReportEU_2026_Annual Legacy_Research_Cover

Legacy systems are no longer just a technical constraint, they’re a growing business risk

 

For years, legacy systems have been treated as an operational necessity, something to maintain, work around, and eventually replace. But that approach no longer holds.

Today, legacy Windows systems sit at the center of a rapidly evolving challenge across industrial environments.

 

They are:

- A security exposure, increasingly targeted by malware, ransomware, and unauthorised access

- An operational constraint, limiting modernisation and increasing complexity
- A business risk, impacting cost, compliance, and long-term resilience

 

And for many organisations, this is no longer just an IT or OT issue. The conversation has shifted from replacement timelines to managing the business risk legacy systems create today.

 

Legacy systems aren’t going away. But the risks are increasing.

 
51%
of organisations experienced cyber incidents involving legacy systems in the past year
56%
cite malware as their top concern
60%
are now planning to invest in dedicated protection

Organisations are caught between security risk and operational disruption.


Download the 2026 Report
ABOUT

LEGACY RESEARCH REPORT

A data-driven view of OT cybersecurity in Europe

550
senior decision-makers
6
European countries
YoY
comparison
2025 vs. 2026
VALUE

WHAT THIS MEANS FOR YOUR ROLE

Turning insight into action

CIO / business leader
Understand cost vs. upgrade trade-offs
OT / plant operations
Reduce risk without disrupting production
CISO / IT security
Move toward unified OT protection

Download the Research Report!

 

Get the full 2026 report and benchmark your OT security strategy.

 

In this report, you’ll discover:

 

How widespread legacy Windows systems still are across OT environments


Why organisations cannot replace legacy systems (and what’s changing)


The real cyber risks targeting legacy OT today


Why incident rates are increasing year over year


What security strategies organisations are actually deploying


What 60% of organisations plan to do next