Topic starter
21/08/2026 4:48 pm
TL;DR: Cyberattacks on critical infrastructure, IoT systems, and digital services can undermine energy efficiency, safety, and business continuity, according to INTIGRITI’s analysis. The sustainability case for security is no longer abstract, because outages, destructive attacks, and biometric exposure turn resilience into a core operational requirement.
Editorial analysis by NHI Mgmt Group, based on content published by INTIGRITI: “Cybersecurity and sustainability: The surprising role that security will play in a sustainable future”.
By the numbers:
- The global average cost of a data breach increased to $4.35 million, according to IBM's report cited by INTIGRITI.
- Almost 80% of critical infrastructure organisations studied do not adopt zero-trust strategies, according to IBM's report cited by INTIGRITI.
- IBM said breach costs in critical infrastructure rose to $5.4 million, a $1.17 million increase compared with organisations that do adopt zero trust, according to INTIGRITI.
Key questions
Q: How should security teams build resilience into sustainability-critical systems?
A: Start by mapping which services, devices and control systems directly affect energy use, water management, safety or continuity.
Q: Why do IoT systems increase operational and sustainability risk?
A: IoT systems often add many low-cost endpoints that improve efficiency but expand the number of reachable entry points.
Q: What breaks when industrial control systems are not protected against unauthorized access?
A: When industrial control systems are not protected, attackers can manipulate equipment, disrupt processes, and affect product quality or safety.
Practitioner guidance
- Define resilience objectives for critical services Tie recovery time, recovery point and failover expectations to the operational and environmental impact of each service, not just to IT service levels.
- Harden IoT device identity and segmentation Require unique device identity, network segmentation and lifecycle management for IoT systems that support energy, water or smart-city operations.
- Separate safety and operational access paths Restrict privileged access to industrial control and safety systems so that compromise of enterprise IT does not automatically expose safety-critical functions.
Bottom line: Cyber incidents can undermine sustainability by wasting resources, disrupting essential services and creating physical risk in critical environments.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
21/08/2026 5:06 pm
Resilience has become a first-class security control because sustainability depends on continuity. The article correctly frames outages as more than operational inconvenience. When digital services underpin energy, supply chains, administration and transport, the security outcome directly affects resource efficiency and social stability. Practitioners should stop treating resilience as a post-incident metric and start treating it as a design requirement.
A question worth separating out:
Q: When should organisations treat cybersecurity as part of sustainability governance?
A: They should do so whenever digital systems underpin critical infrastructure, smart buildings, transport, utilities or industrial operations. In those cases, security controls protect not only confidentiality and uptime but also resource efficiency, environmental outcomes and human safety.
👉 Read our full editorial: Cybersecurity and sustainability: why resilience now drives impact