Survey of 100+ Energy Systems Reveals Critical OT Cybersecurity Gaps

**Executive summary:** OMICRON's analysis of StationGuard IDS deployments across 100+ substations, power plants, and control centers revealed pervasive OT security gaps — including outdated/unpatched PAC device firmware (e.g., CVE-2015-5374), undocumented external TCP/IP connections, weak network segmentation, asset blind spots, and operational issues like VLAN misconfigurations and time synchronization errors — and recommends network-level intrusion detection, automated asset discovery, and OT-specific controls to reduce exposure.