© VDMA-Report Industrial Security

The incidents currently reported by the companies are highly unlikely to reflect the actual number of incidents. This is because only 57% of participants have taken measures to detect security incidents. In addition to the fact that a decision is made not to report security incidents for compliance reasons or fear of reputational damage, companies can also only report incidents that have been detected. In addition, it is not always clear whether a security incident has occurred - there is a lack of clear definitions.