Half of Europe’s industrial organisations have already experienced cyber incidents linked to legacy systems
New 2026 research from 550+ OT and security leaders reveals why legacy assets remain exposed — and what organisations are doing about it


Legacy systems are no longer just a technical constraint, they’re a growing business risk
For years, legacy systems have been treated as an operational necessity, something to maintain, work around, and eventually replace. But that approach no longer holds.
Today, legacy Windows systems sit at the center of a rapidly evolving challenge across industrial environments.
They are:
- A security exposure, increasingly targeted by malware, ransomware, and unauthorised access
- An operational constraint, limiting modernisation and increasing complexity- A business risk, impacting cost, compliance, and long-term resilience
And for many organisations, this is no longer just an IT or OT issue. The conversation has shifted from replacement timelines to managing the business risk legacy systems create today.
Legacy systems aren’t going away. But the risks are increasing.
Organisations are caught between security risk and operational disruption.
LEGACY RESEARCH REPORT
A data-driven view of OT cybersecurity in Europe
WHAT THIS MEANS FOR YOUR ROLE
Turning insight into action
Download the Research Report!
Get the full 2026 report and benchmark your OT security strategy.
In this report, you’ll discover:
√ How widespread legacy Windows systems still are across OT environments
√ Why organisations cannot replace legacy systems (and what’s changing)
√ The real cyber risks targeting legacy OT today
√ Why incident rates are increasing year over year
√ What security strategies organisations are actually deploying
√ What 60% of organisations plan to do next
