Critical infrastructure systems today operate in environments where safety, security and digital risks intersect. The growing complexity of operations, combined with increasing exposure to cyber threats and persistent industrial safety challenges, is reshaping how risks are understood. A key theme emerging from industry discussions is the need to move beyond isolated approaches and examine how physical systems, digital networks, and human factors interact within the same risk environment.
Rising Cyber Threats with Regional Concentration
Recent data indicates a significant concentration of cyber threats in the Asia-Pacific region. A substantial share of global cyberattacks has been directed at this region, accompanied by a sharp rise in ransomware activity. Data breaches have also increased significantly, with a large proportion attributed to intrusions. Within this landscape, India has witnessed a marked increase in cyberattacks, highlighting the growing exposure of its systems to digital threats.
Persistent Industrial Safety Challenges
Alongside cyber risks, industrial safety remains a critical concern. Hundreds of workers continue to lose their lives in industrial accidents, with high-risk sectors such as chemicals and pharmaceuticals reporting a significant number of fatalities and injuries. A large proportion of the workforce operates with minimal or no safety protections, adding to the overall risk profile. National-level estimates further indicate tens of thousands of occupational fatalities annually, along with measurable economic impact.
The Numbers Behind the Risk Convergence
The scale and nature of risks across cyber and industrial domains can be understood through the following indicators:
Critical Infrastructure Sectors Under Pressure
The impact of these risks is particularly visible in critical infrastructure sectors. Industries such as manufacturing, financial services, healthcare, transport and logistics, energy and utilities, and telecommunications are among the most exposed. These sectors play a central role in economic stability and public service delivery, making disruptions in their operations highly consequential.
The evolving risk landscape in critical infrastructure is shaped by the intersection of physical, digital, and human factors
Evidence from Recent Incidents
Recent incidents illustrate how disruptions can affect critical systems. A ransomware attack on a state power grid resulted in a large-scale blackout affecting millions of people. In another instance, a cyberattack on a major healthcare institution disrupted hospital operations and halted medical procedures. These examples highlight the real-world consequences of vulnerabilities within critical infrastructure systems.
The Role of Human Factors
Human factors continue to play a central role in risk environments. Individuals are identified as both the most vulnerable element and the first line of defence. This dual role underscores the importance of awareness, responsibility, and participation at multiple levels, extending from individuals to communities and broader systems.
Towards an Integrated Approach
A recurring theme across discussions is the need to integrate physical safety, cybersecurity, and human insights. This approach focuses on bringing together different dimensions of risk to enable more effective mitigation. The objective is to support proactive efforts across cybersecurity, process safety, and functional safety by aligning insights from physical systems, digital environments, and human behaviour.
Implications for Resilience
The convergence of cyber threats, industrial risks, and human vulnerabilities has direct implications for resilience. The scale of industrial fatalities and the economic impact associated with safety challenges indicate that risks extend beyond isolated incidents to broader systemic effects. Understanding how these elements interact is essential for strengthening preparedness and response across critical infrastructure sectors.
The evolving risk landscape in critical infrastructure is shaped by the intersection of physical, digital, and human factors. Increasing cyber threats, persistent industrial safety challenges, and the central role of human behaviour highlight the complexity of the environment.
An integrated approach that brings together these dimensions is emerging as a key direction for managing risks and enhancing resilience. Moving beyond isolated measures towards coordinated strategies reflects a shift in how safety and security are being understood across critical infrastructure systems.
This white paper is based on a presentation by Meghana Pote, Deputy General Manager—Cybersecurity, Dekra Testing Inspection & Certification India, at the International Process Safety Conference 2026 organised by ENCIS and co-organised by ITEN Media.
