Survey Finds 75% of Firms Have Structured Compliance Programs, but Regulatory Keep-Up Remains a Challenge

Claroty's Global State of Operational Security 2026 report found that 75% of respondents have a structured or proactive approach to cybersecurity compliance for critical infrastructure, while 38% cited keeping pace with evolving regulations as a challenge. The article argues that CIOs and CISOs must clarify who owns implementation across IT and operations, define how to handle exceptions when controls are infeasible, and adapt as requirements change. Note that the piece is sponsored by Claroty and draws on its own survey data.

Why it matters: IT and OT leaders face gaps when security teams set controls without operations owning the approval path for exceptions, so clear cross-team governance is a practical priority.