The 2025 SANS ICS/OT Cybersecurity Budget Report highlights a troubling reality: USB devices and contractor laptops remain among the leading causes of industrial security incidents.

Despite years of awareness, investment still lags behind the risk. This article explores why the gap persists and what it means for organizations today.