solutions/industries/transportation-logistics

Most operators can't say what a day of OT disruption would cost

TSA security directives and NIS2 now expect OT cyber risk management. Neither tells you what a stopped terminal or yard would cost.

Terminals, yards and hubs on shared networks

Cranes, signaling, yard systems and warehouse automation run on OT that is often managed by vendors, with little network monitoring.

US transport network · 24 sites

1
Container terminal · CANo OT monitoring · crane control systems
2
Freight corridorWest Coast → New York

Unmonitored siteMonitored siteFreight corridor

92%without OT monitoring

24terminals, yards and hubs

2with OT monitoring

One incident, many kinds of loss

Stopped terminals, delayed cargo, damaged equipment and contract penalties hit at once. The DeRISK Consequence Model counts each cost exactly once.

Loss from one event · $5.6M

Operational disruption$3.1M

Delayed cargo and rerouting$1.2M

Equipment damage$0.7M

Contract penalties$0.6M

$300Mwas Maersk’s estimated cost of the 2017 NotPetya attack, which disrupted its port terminals worldwide.

A color can't be budgeted

Boards, regulators and insurers need a number. A heat map can't go into a budget or a renewal; an Expected Annual Loss can.

Heat map

Port terminals High
Rail yards High
Logistics hubs Medium

DeRISK · EAL

Port terminals $3.9M
Rail yards $2.7M
Logistics hubs $1.8M

Quantify, reduce and transfer
OT cyber risk in transportation and logistics

Put a dollar figure on every site, from crane to warehouse

DeRISK™ CRQ quantifies OT cyber risk site by site and rolls it up to the portfolio, so the board, the CFO and the CISO work from the same Expected Annual Loss.

Expected Annual Loss, Value at Risk and loss exceedance (OEP/AEP), site by site and across the portfolio
A 50-question assessment in the DeRISK Control Model, NIST SP 800-82r3 or IEC 62443
Five role-based reports at Level 3 Board-Grade, from the Cyber Risk Brief to the Risk Transfer Evidence Bundle

Explore DeRISK CRQ →

Built around how transportation actually runs

DeRISK™ CRQ models your operation the way you run it: segment by segment, site by site, crane to warehouse.
Each site’s Expected Annual Loss traces to the losses that matter here: a stopped terminal, delayed cargo, damaged equipment.
Every site rolls up into one portfolio view your CFO and insurers read the same way.