Notifications
Clear all
Topic starter
21/08/2026 4:48 pm
TL;DR: Cyberattacks on critical infrastructure, IoT systems, and digital services can undermine energy efficiency, safety, and business continuity, according to INTIGRITI’s analysis. The sustainability case for security is no longer abstract, because outages, destructive attacks, and biometric exposure turn resilience into a core operational requirement.
NHIMG editorial — based on content published by INTIGRITI: Cybersecurity and sustainability: the surprising role that security will play in a sustainable future
By the numbers:
- 80% of critical infrastructure organisations in IBM’s study, s study did not adopt zero-trust strategies, and their average breach costs rose to $5.4 million.
- The global average cost of a data breach reached $4.35 million, according to IBM.
Questions worth separating out
Q: How should security teams reduce sustainability risk in connected infrastructure?
A: Start by identifying which systems would create environmental, safety, or continuity impact if they failed, then apply tighter access control, segmentation, and privileged access governance to those assets.
Q: Why do IoT systems increase operational and sustainability risk?
A: IoT systems often add many low-cost endpoints that improve efficiency but expand the number of reachable entry points.
Q: What do organisations get wrong about cybersecurity and sustainability?
A: They often treat sustainability as a facilities or reporting issue and security as a separate technical layer.
Practitioner guidance
- Map sustainability-critical assets to identity controls Identify which infrastructure, IoT, and control-system assets directly affect energy, safety, or continuity, then bind each to explicit authentication, authorization, and privileged access requirements.
- Segment connected systems by operational impact Separate sensor networks, operator interfaces, and control pathways so a compromised device cannot easily reach safety or production controls.
- Apply lifecycle controls to machine identities Track device credentials, certificates, and service accounts from issuance to retirement, including rotation and offboarding.
What's in the full article
INTIGRITI's full article covers the sustainability angles this post intentionally leaves at the governance level:
- The article expands on how ransomware and destructive attacks can affect resource efficiency and social sustainability.
- It gives more detail on smart-city and IoT use cases where connected devices widen the attack surface.
- It explains the business and workforce impact of breaches, including insolvency risk and job loss.
- It links bug bounty participation to broader social sustainability and access to security careers.
👉 Read INTIGRITI's analysis of how cybersecurity supports a sustainable future →
Cybersecurity and sustainability: what resilience means for security teams?
Explore further
21/08/2026 5:06 pm
Cyber resilience is now a sustainability control, not a separate discipline. When outages, destructive attacks, or recovery churn waste energy and disrupt essential services, security becomes part of environmental and social sustainability. That changes the governance question from whether organisations can tolerate downtime to whether they can afford ungoverned downtime in critical systems. Practitioners should treat resilience as an operational sustainability requirement, not a post-incident metric.
A question worth separating out:
Q: Which controls matter most when critical systems use biometric data or physical automation?
A: Strong authentication, least privilege, segmentation, and privileged session oversight matter most because they limit who or what can act on the system. Biometric data can help with verification, but it does not replace authorisation or lifecycle governance. The decision point is whether the system can limit damage if a trusted component is abused.
👉 Read our full editorial: Cybersecurity and sustainability: why resilience now drives impact
