The DeNexus Blog
Analysis on CRQ, OT threats, regulation and cyber underwriting, written by our risk engineers and actuaries.
100+posts
More posts · 100
DeNexus Joins the ISA Global Cybersecurity Alliance (ISAGCA)
Read post
What the New US Bulk-Power Emergency Order Actually Does
Read post
India Just Made OT Cyber a Board Problem. NERC CIP Shows Where That Road Leads.
Read post
CIP-015-2 Is Approved: What NERC CIP Utilities Need to Know Through 2031
Read post
How to Assess OT Cybersecurity Maturity: Models, Levels, and What Comes After the Score
Read post
Redefining Underwriting: How Autonomous AI Agents Assess Insurance Risk
Read post
Inside One MITRE ATT&CK for ICS Attack Path: What a Modbus Compromise Actually Costs
Read post
Water Sector OT Incidents: What the Public Record Confirms as of 3 August 2026
Read post
ENISA Threat Landscape 2025/2026: What It Means for OT Operators and Insurers
Read post
Braham’s Water Cyberattack Is a Level 3 Incident—Without Physical Damage or Loss of Water Service
Read post
AA26-097A Update: The Escalation from PLC Access to Safety and Alarm Suppression
Read post
CISA Just Retired CVSS as a Mandate. OT Still Needs a Dollar Answer.
Read post
Selling Into the Boardroom: GTM Lessons from Building an OT Cyber Risk Category
Read post
When Six Governments Say the Same Thing, It’s Time to Listen — and Act
Read post
From Dwell Time to Dollars: Turning OT Incident Response Into a Financial Argument
Read post
The Cyber-Physical Balance Sheet: Managing OT Cyber Risk, Insurance, and Resilience
Read post
OT Underwriting Evidence Starts with the Right Questions
Read post
Anthropic expanding Project Glasswing to Critical Infrastructure, alongside OpenAI Trusted Access for Cyber Programme.
Read post
Mythos and Project Glasswing: the OT blind spots
Read post
DeNexus Named in Gartner’s Hype Cycle for Cyber-Risk Management, 2026
Read post
The Five Places OT Risk Management Breaks — and the One Thing That Fixes All of Them
Read post
We just launched the first agentic AI underwriting platform for industrial cyber insurance. Here's why it matters.
Read post
CISA AA26-097A: Iranian APT Is Actively Exploiting Rockwell PLCs Across US Critical Infrastructure
Read post
The US Production Act Prioritized Grid Infrastructure. Every Asset It Names Needs an OT Cyber Risk Number.
Read post
OT Cyber Insurance Protection Gap: $1 Trillion Uninsured
Read post
5 Insurance Use Cases for OT Cyber Maturity Scores
Read post
8 Use Cases for a Harmonized OT Cybersecurity Maturity Model
Read post
Why OT Maturity Scores Get Stuck — and How to Fix Reporting
Read post
OT Cyber & Insurance Gap: When Digital Attacks Cause Physical Loss
Read post
NSA Zero Trust Guidelines (ZIGs): Implications for ICS/OT
Read post
ICS/OT Compromise-to-Remediation Trends 2024–2025 | DeNexus
Read post
AI Data Centres: New Cyber-Physical Risks for Insurers
Read post
Quantify, Reduce & Transfer OT Cyber Risk | DeNexus
Read post
OT Cyber Insurance Gap: Why Standard Policies Miss Physical Loss
Read post
AI Data Centers Are Cyber-Physical Systems: Security Implications
Read post
NERC CIP Roadmap 2026: What's Changing & How CRQ Helps
Read post
OT Cyber Tail Risk for Infrastructure Funds | DeNexus
Read post
Harmonizing OT Cybersecurity Maturity Models | DeNexus
Read post
Gallagher 2026 Market Outlook: What It Means for OT/ICS Risk
Read post
OT Secure Connectivity Is Not Enough: Why CRQ Is Essential
Read post
Why Infrastructure Funds Must Address OT Cyber Risk | DeNexus
Read post
UK Cyber Action Plan: OT Risk Quantification for Essential Services
Read post
OT Cybersecurity 2026: Quantifying Cyber-Physical Risk | DeNexus
Read post
Top 6 Cybersecurity Solutions for Industrial Environments
Read post
AI Agents in Cybersecurity & OT Risk Management: 5 Key Trends
Read post
ICS/OT Attack Vector Trends 2021–2025: SANS Survey Analysis
Read post
OT Cyber Risk Quantification & DSIT's 2025 OT Security Study
Read post
Extreme Cyberattacks Cause 14% Value Loss Over 2 Years
Read post
CISA CPG 2.0 & Cyber Risk Quantification for Critical Infrastructure
Read post
CISA Alert: Quantified Vulnerability Management for OT Security
Read post
OT MSSP Metrics: 3 KPI Types for Industrial Security Programs
Read post
CISA AI in OT Guidance: What Leaders Need to Know | DeNexus
Read post
Cyber-Enabled Kinetic Targeting: OT Cybersecurity Implications
Read post
DeRISK QVM: Risk-Based OT Vulnerability Management for Data Centers
Read post
Dutch Cybersecurity 2025 Report: Key Lessons for ICS/OT Leaders
Read post
Q3 2025 OT Cyber Incidents: $329.5B in Industrial Losses
Read post
UK Cyber Law Makes OT Risk Quantification Essential | DeNexus
Read post
Industrial AI & OT Cybersecurity: Why CRQ Matters More Than Ever
Read post
Scott Frederick Joins DeNexus Board of Directors | DeNexus
Read post
Homeland Security Threat Snapshot: Why OT CRQ Is Now Essential
Read post
DeNexus Redefines Cyber Aggregation Risk at ASTIN Workshop
Read post
OT Cyber Risk in Electric Co-ops: Protecting Rural Power Systems
Read post
Code Red: The Economics of Cyber-Physical Risk | DeNexus
Read post
MITRE ATT&CK v18: Elevating OT/ICS Cyber Risk Quantification
Read post
DeRISK QVM: Risk-Based OT Vulnerability Management for Renewables
Read post
Measuring Cyber Resilience in Financial Terms: WEF Insights
Read post
Financial Cyber Risk Quantification in Manufacturing | DeNexus
Read post
DeNexus Named Industrial Cyber Risk Solution of the Year 2025
Read post
ENISA 2025 Threat Landscape: OT Security Risks Every CISO Must Know
Read post
OT Cyber Risk Quantification for Renewable Energy Financing
Read post
DeRISK CRQ: Automotive Cybersecurity & Financial Risk Quantification
Read post
AI Data Centers & Cyber Risk: Power Demand Creates Security Gaps
Read post
DeNexus Named Gartner Sample Vendor: CPS Security 2025
Read post
NERC 2025 RISC Report: Grid Cyber Risk & How CRQ + QVM Help
Read post
DeRISK QVM: Risk-Based Vulnerability Management for Manufacturing
Read post
DeRISK QVM: Risk-Based OT Vulnerability Management for MSSPs
Read post
FERC Approves NERC CIP-015-1: Impact on OT Security & CRQ
Read post
Why Industrial Firms Need Quantitative Cyber Risk Financial Metrics
Read post
DeRISK QVM: Risk-Based Vulnerability Management for Power Generation
Read post
DeNexus Trusted Ecosystem: Data Security for OT Risk Quantification
Read post
Aligning Stakeholders with OT Cyber Risk Quantification | DeNexus
Read post
Quantifying Physical & Cyber Risk Costs for Data Centers | DeNexus
Read post
Could Spain's Blackout Have Been a Cyber Attack? | DeNexus
Read post
Evolution of Patch Management: From Risk-Based to Quantified OT
Read post
ata Center OT: Cyber and Physical Security Risks | DeNexus
Read post-2.png?width=720&height=405&name=Blog%20image%20(3)-2.png)
AI Agents in DeRISK: Industrial Cyber Risk Management | DeNexus
Read post-3.png?width=720&height=405&name=Blog%20image%20(1)-3.png)
Remote Services in Industrial Environments: Financial Risk Report
Read post
OT Cyber Risk: Mitigate, Transfer, or Both? | DeNexus
Read post
Industrial Cyber Risk: Mitigate or Transfer? | DeNexus eBook
Read post.png?width=720&height=405&name=Blog%20image%20(10).png)
SEC S-K vs. NIS2 Directive: Cyber Risk Disclosure Compared
Read post.png?width=720&height=405&name=Blog%20image%20(6).png)
Financial Quantification of Industrial Cyber Risk | DeNexus eBook
Read post
UK Designates Data Centers as Critical Infrastructure: What It Means
Read post
Internal Telemetry: A Pre-Requisite for OT Cyber Risk Management
Read post.jpeg?width=720&height=405&name=Image%20(3).jpeg)
What CISOs Said at Black Hat 2024 About OT Cyber Risk | DeNexus
Read post
Align Cyber Risk Planning to Business Milestones | DeNexus eBook
Read postSecuring the Data Center Economy: OT Cyber & Physical Risk
Read postThe DeNexus Risk Brief One email a month.
New research, upcoming webinars and the regulatory changes that move OT cyber risk, in a five-minute read. No product pitches.
- Monthly, never more
- Written by practitioners
- Unsubscribe in one click
Get new posts as they are released
Subscribe and every new DeNexus blog post comes straight to your inbox.
One email per new post. Unsubscribe in one click.