Issue 04/October 2026 SMEs Urged to Strengthen Cyber Security as Threats to Industrial Systems Rise
SMEs Warned to Review Internet-Exposed Systems as Cyber Threats Escalate
Small and medium-sized businesses are being urged to strengthen their cyber security after the National Cyber Security Centre (NCSC) warned that attacks on industrial and operational systems are increasing both in the UK and globally.
Traditionally, cyber attacks have focused on business networks, emails and data. However, criminals and state-sponsored actors are increasingly targeting Operational Technology (OT), the hardware and software that controls manufacturing processes, infrastructure, utilities and other critical business operations.
Cyber Attacks Are Moving Beyond Traditional IT
Recent incidents have demonstrated that cyber threats can have real-world consequences. Operational technology systems are often responsible for monitoring, controlling and automating physical processes, meaning a successful attack can disrupt production, services and business continuity.
Many organisations assume that their operational systems are not connected to the internet and therefore are protected from external threats. However, outdated configurations, legacy equipment and unmanaged connections can unintentionally leave systems exposed and vulnerable.
As cyber capabilities continue to develop and geopolitical tensions increase, the NCSC has warned businesses not to underestimate the risks posed by both criminal groups and nation-state actors.
Why SMEs Should Be Concerned
While large organisations often make the headlines, SMEs are increasingly being targeted because they may have fewer dedicated cyber security resources and older infrastructure.
Businesses operating in sectors such as:
- Manufacturing
- Engineering
- Logistics
- Energy
- Utilities
- Processing and production
should pay particular attention to the security of their operational technology environments.
Systems such as Programmable Logic Controllers (PLCs), Industrial Control Systems (ICS) and Supervisory Control and Data Acquisition (SCADA) systems can be attractive targets if not adequately protected.
Key Steps Businesses Should Take
The NCSC recommends that organisations take a proactive approach to securing operational technology by:
Understanding Their Network
Businesses should maintain a clear and up-to-date view of their operational technology environment, including:
- Connected devices
- External connections
- Communication pathways
- Legacy systems
This helps identify internet-exposed assets and potential weaknesses.
Restricting Internet Access
Operational technology devices should not be directly accessible from the public internet.
Organisations should also ensure that management interfaces are separated from external-facing networks wherever possible.
Strengthening Access Controls
Basic security measures can significantly reduce risk, including:
- Changing default passwords
- Eliminating shared administrator accounts
- Using unique user credentials
- Enabling multi-factor authentication (MFA)
Restricting access to authorised personnel only can help prevent unauthorised activity.
Separating Critical Networks
The NCSC recommends separating business systems from operational technology networks.
Network segregation helps contain potential breaches and prevents attackers from moving between systems if a compromise occurs.
Monitoring Systems and Activity
Operational technology environments are often highly predictable, making unusual behaviour easier to spot.
Regular monitoring can help businesses identify:
- Unauthorised access attempts
- Configuration changes
- Suspicious network activity
- Potential cyber attacks
Early detection can significantly reduce the impact of a security incident.
Testing Backups and Recovery Plans
Creating backups is only part of the solution.
Businesses should regularly test both their backups and recovery procedures to ensure critical systems can be restored quickly if an incident occurs. Many organisations only discover weaknesses in their recovery plans when attempting to restore systems during an emergency.
Building Cyber Resilience
The cyber threat landscape continues to evolve, and businesses can no longer assume that operational systems are protected simply because they are not part of the main IT network.
By reviewing internet-facing systems, strengthening access controls, monitoring critical infrastructure and testing recovery procedures, SMEs can significantly improve their resilience against emerging cyber threats.
Need Support Protecting Your Business?
Cyber security is no longer just an IT issue; it's a business risk that can affect operations, reputation and profitability. Taking preventative action now can help safeguard your business against increasingly sophisticated attacks and ensure you're prepared for the challenges ahead.
