OT Cyber Risk Intelligence Newsletter – October 2026 | DeNexus
Why "compared to what?" is becoming the standard for OT risk — cohort benchmarks and one-page executive narratives, plus oil-tanker boardings, EU CRA,...

Why "compared to what?" is becoming the standard for OT risk — cohort benchmarks and one-page executive narratives, plus oil-tanker boardings, EU CRA,...

Clearway's Director of Cybersecurity on building an OT cyber risk program across a renewable fleet, from a first inventory to board and insurance...

An underwriter from Chaucer and DeNexus experts discuss OT cyber capacity, silent cyber, and policy gaps, plus a live demo of UWA. Watch the full...

DeNexus has joined the ISA Global Cybersecurity Alliance (ISAGCA), supporting ISA/IEC 62443 as the foundation for quantifying, reducing, and transferring...

This month: the controls that measurably move the loss curve, US water-sector PLC attacks, new bulk-power and CI Fortify guidance, plus DeNexus events.

The 26 August 2026 bulk-power emergency order is a supply-chain intervention, not a cyber response. What DOE can now do, and which assets fall in scope.

India's CEA cyber security regulations take force April 1, 2027. How they compare to NERC CIP, where they diverge, and why compliance alone won't answer...

FERC approved CIP-015-2 in August 2026, but the first INSM deadline is still 1 October 2028. Here's the four-phase timeline utilities face through 2031.

C2M2, NIST CSF, IEC 62443 — how OT maturity scoring actually works, why 81% self-rate at the top, and how to turn a score into a funded, dollar-based plan.