TRANSPORT EDITION
More than half of Europe’s transport organisations have already experienced cyber incidents linked to legacy systems
New 2026 research reveals why legacy OT remains a growing cybersecurity challenge across transport environments and how organisations are responding.


Legacy Windows systems are becoming a growing operational and cybersecurity challenge for transport organisations
Across transport environments, legacy Windows systems continue to support critical operations, from signalling controllers and depot management systems to passenger information platforms and operational infrastructure.
But while these systems remain essential, they are also becoming increasingly difficult to secure.
For many organisations, replacing legacy systems is not a realistic short-term option. The challenge is finding practical ways to reduce risk while keeping operations running.
Transport organisations face a difficult balancing act:
☐ Managing growing cybersecurity risks
☐ Maintaining operational continuity
☐ Supporting ageing infrastructure
☐ Modernising without disrupting critical services
Legacy systems aren’t going away. But the risks are increasing.
Transport organisations are caught between cybersecurity risk and operational reality.
ABOUT
A data-driven view of legacy OT security in the transport sector
Based on responses from transport-sector OT cybersecurity leaders across Europe, this report examines:
✔ The prevalence of legacy Windows systems across transport OT environments
✔ The cyber risks most commonly affecting transport operations
✔ Why legacy systems remain difficult to replace
✔ How operators are protecting ageing infrastructure today
✔ What drives investment decisions around OT cybersecurity
✔ The strategies transport organisations are adopting to improve resilience
WHAT THIS MEANS FOR YOUR ROLE
Turning insight into action
Download the Research Report!
Get the full 2026 report and benchmark your OT security strategy.
In this report, you’ll discover:
√ How widespread legacy Windows systems still are across OT environments
√ Why organisations cannot replace legacy systems (and what’s changing)
√ The real cyber risks targeting legacy OT today
√ Why incident rates are increasing year over year
√ What security strategies organisations are actually deploying
