Cybersecurity and sustainability: why resilience now drives impact

At a glance

What this is: INTIGRITI argues that cybersecurity and sustainability are linked because cyberattacks can disrupt critical infrastructure, waste resources and create direct safety risks.

Why it matters: For IAM, NHI and broader security teams, this matters because resilience, access control and recovery planning increasingly determine whether digital systems can support sustainable operations.

By the numbers:

• The global average cost of a data breach increased to $4.35 million, according to IBM's report cited by INTIGRITI.
• Almost 80% of critical infrastructure organisations studied do not adopt zero-trust strategies, according to IBM's report cited by INTIGRITI.
• Ransomware or destructive attacks accounted for 28% of breaches among critical infrastructure organisations studied, according to IBM's report cited by INTIGRITI.
• IBM said breach costs in critical infrastructure rose to $5.4 million, a $1.17 million increase compared with organisations that do adopt zero trust, according to INTIGRITI.

Context

Cybersecurity is not only a confidentiality and availability issue. In critical infrastructure, IoT environments and digitally enabled operations, a security failure can increase waste, interrupt essential services and undermine the continuity needed for sustainable business and social systems.

The identity angle appears where these environments depend on privileged accounts, service access and machine-to-machine trust. When access is poorly controlled, attackers can move from disruption to physical or operational impact, which is why resilience has become a governance issue, not just a technical one.

Key questions

Q: How should security teams build resilience into sustainability-critical systems?

A: Start by mapping which services, devices and control systems directly affect energy use, water management, safety or continuity. Then set recovery targets and access boundaries around those impacts, not around generic IT uptime. That approach makes security measurable in business and sustainability terms, which is where board-level decisions are actually made.

Q: Why do IoT systems increase operational and sustainability risk?

A: IoT systems often add many low-cost endpoints that improve efficiency but expand the number of reachable entry points. If those devices are weakly patched, broadly connected, or over-trusted, a single compromise can spread into core operations. The risk is not only data exposure, but lost service, wasted resources, and possible safety impact.

Q: What breaks when industrial control systems are not protected against unauthorized access?

A: When industrial control systems are not protected, attackers can manipulate equipment, disrupt processes, and affect product quality or safety. Because these systems control high-risk manufacturing operations, a breach can move beyond data loss into downtime, plant shutdowns, and physical disruption. The failure is not only technical. It becomes operational, financial, and sometimes safety-related very quickly.

Q: When should organisations treat cybersecurity as part of sustainability governance?

A: They should do so whenever digital systems underpin critical infrastructure, smart buildings, transport, utilities or industrial operations. In those cases, security controls protect not only confidentiality and uptime but also resource efficiency, environmental outcomes and human safety.

Technical breakdown

Why critical infrastructure outages become sustainability failures

Critical infrastructure depends on digital control systems, monitoring platforms and remote access paths that keep physical services running efficiently. When attackers disrupt those systems, the result is not only downtime but also wasted energy, interrupted supply chains and unsafe operating conditions. In industrial and utility settings, the security model has to assume that availability failures can cascade into environmental and social damage. The practical point is that resilience metrics should be treated as sustainability controls, not just IT service measures.

Practical implication: map critical services to recovery objectives that reflect operational and environmental impact, not only IT uptime.

IoT expansion increases the attack surface of sustainable systems

IoT devices support smart grids, energy optimisation and water management by collecting and transmitting operational data. That same connectivity also expands the attack surface because many devices are narrowly purposed, remotely reachable and difficult to patch consistently. Where those devices mediate physical processes, compromise can alter efficiency controls, expose sensitive data or provide a route into broader networks. The key governance issue is that sustainability benefits from IoT are only durable when device identity, network segmentation and lifecycle management are enforced.

Practical implication: treat IoT device identity and segmentation as core controls in sustainability-linked environments.

Safety instrument systems show how cyber compromise becomes physical risk

Safety instrument systems are designed to prevent unsafe outcomes when industrial processes behave unexpectedly. If attackers gain control over those systems, the issue is no longer just data loss or service interruption. The threat extends to toxic release, equipment damage and potential loss of life. That makes this a classic example of cyber-physical risk where authentication, access boundaries and operational segregation all matter. In practice, security teams need to understand that some privileges protect people and plant safety, not just information assets.

Practical implication: separate safety and operational access paths and apply the strongest possible privilege controls to industrial control environments.

Threat narrative

Attacker objective: The attacker aims to disrupt essential services, force operational shutdowns or create unsafe physical conditions that amplify business and societal impact.

1. Entry occurs through ransomware, malware or other compromise of the systems that run critical infrastructure or industrial processes.
2. Credential or control abuse lets the attacker disrupt operational technology, safety instrumentation or connected infrastructure components.
3. Escalation turns the compromise into outage, resource waste or unsafe operating conditions that affect services and physical environments.

Breaches seen in the wild

• Sisense breach 2024: A credential in Sisense's GitLab reportedly opened S3 buckets of customer tokens, passwords and certificates; CISA urged a full reset.
• CISA Private-CISA GitHub leak 2026: A CISA contractor's public GitHub repo exposed AWS GovCloud admin keys, Artifactory credentials and plaintext passwords for six months.

Read and download The State of NHI & AI Agent Breach Report 2026, covering 200+ breaches impacting Non-Human Identities including AI Agents.

NHI Mgmt Group analysis

Resilience has become a first-class security control because sustainability depends on continuity. The article correctly frames outages as more than operational inconvenience. When digital services underpin energy, supply chains, administration and transport, the security outcome directly affects resource efficiency and social stability. Practitioners should stop treating resilience as a post-incident metric and start treating it as a design requirement.

IoT-enabled sustainability creates a device identity problem as much as a connectivity problem. Smart grids, environmental sensors and industrial IoT platforms only deliver value when each device is trustworthy, scoped and recoverable. That means the governance question is not just whether devices are connected, but whether their identities, access paths and lifecycle are controlled well enough to prevent them becoming entry points. Practitioners should align device trust with the sustainability use case, not the convenience of deployment.

Safety-adjacent environments expose the limits of conventional cyber control thinking. Once an attacker can affect safety instrument systems, the failure mode is no longer confined to data or uptime. This is where cyber risk becomes physical risk, and where identity controls around privileged access, segmentation and segregation of duties matter most. Practitioners should assume that any environment protecting people or plant requires stricter access boundaries than general enterprise IT.

Cyber resilience is now part of the sustainability business case, not a separate security argument. The article’s strongest contribution is that it links cost, continuity, worker impact and environmental consequence in one chain. That is useful because boards increasingly need to understand that an outage can destroy value in several dimensions at once. Practitioners should translate resilience work into business, safety and sustainability language rather than limiting it to control compliance.

What this signals

Cyber resilience is now a sustainability dependency. For practitioners, the practical shift is that outages, ransomware and unsafe control-system behaviour must be evaluated in business continuity, safety and environmental terms at the same time. That means resilience planning belongs in executive sustainability discussions, not only in security operations.

Identity control matters where operational technology meets digital trust. As more sustainability programmes depend on IoT and connected infrastructure, device identity, privileged access and segmentation become the controls that decide whether the system stays efficient or becomes a liability. Practitioners should treat access governance as part of sustainable design.

Service and machine trust boundaries are the real programme risk. The article points to a future in which sustainability gains can be undone by poorly controlled connectivity. Practitioners should watch for environments where convenience has outrun lifecycle control, because that is where resilience gaps become operational and reputational failures.

For practitioners

• Define resilience objectives for critical services Tie recovery time, recovery point and failover expectations to the operational and environmental impact of each service, not just to IT service levels.
• Harden IoT device identity and segmentation Require unique device identity, network segmentation and lifecycle management for IoT systems that support energy, water or smart-city operations.
• Separate safety and operational access paths Restrict privileged access to industrial control and safety systems so that compromise of enterprise IT does not automatically expose safety-critical functions.
• Plan for destructive and ransomware scenarios Exercise outages that combine encryption, shutdown and service disruption so recovery plans account for both continuity and environmental impact.

Key takeaways

• Cyber incidents can undermine sustainability by wasting resources, disrupting essential services and creating physical risk in critical environments.
• The article links resilience to sustainability through outages, ransomware and safety-system compromise, showing that continuity is a governance issue as much as a technical one.
• Practitioners should align recovery, access control and device governance with the operational and environmental impact of the systems they protect.

Key terms

• Operational Resilience: Operational resilience is the ability to keep critical services running or recover them quickly after disruption. In identity-led environments, that depends on authentication services, privilege management, and recovery procedures that can be tested under realistic failure conditions.
• Industrial Control Systems: Industrial control systems are the components that directly automate and supervise industrial processes, including controllers, sensors, and supervisory software. They are a subset of operational technology, but they often carry the most sensitive control paths and therefore demand specialised access and monitoring controls.
• Safety Instrument System: A safety instrument system is a dedicated industrial protection layer that detects dangerous conditions and moves a process into a safer state. It is not just another networked system. If attackers manipulate it, the consequence can extend beyond disruption into physical damage, toxic release or harm to people.
• IoT Attack Surface: The total set of connected devices, interfaces, and pathways that can be reached or exploited in an environment. In practice, it includes managed and unmanaged endpoints, embedded systems, and shadow devices that extend trust boundaries beyond what teams can see.

Deepen your knowledge

NHI Mgmt Group covers identity security, NHI governance, and agentic AI through independent research, practitioner guides, and the NHI Foundation Level course. It helps security leaders connect identity governance to resilience, access control and lifecycle oversight across modern programmes.