SectorsOperational context changes consequence
Cyber risk changes with the system around it.
The publication is organised by the operational context in which technology runs, because consequence and viable mitigation rarely survive a sector change unchanged.
01OT & ICSSecurity decisions where cyber controls can affect process availability, engineering access and physical recovery.02AutomotiveVehicle cybersecurity, production interfaces, supplier evidence and lifecycle decisions under ISO/SAE 21434 and UN R155.03RailwayCybersecurity at the intersection of supplier ecosystems, operational availability and safety assurance.04Product SecurityThe integrity of product artefacts, release evidence, software provenance and lifecycle decisions.05AI SecurityContainment, trust boundaries and infrastructure around increasingly capable AI evaluation workloads.06Supply ChainIdentities, technical data, contractual evidence and the trust relationships that sit outside the enterprise boundary.