NCC Group and Dragos Partner for IT/OT Incident Response

NCC Group and Dragos have launched a new IT/OT incident response service, a strategic partnership designed to enhance critical infrastructure protection. The service combines NCC Group's globally recognized Digital Forensic and Incident Response (DFIR) capabilities with Dragos's specialized OT cybersecurity technology and threat intelligence.

NCC Group announced an enhanced partnership with Dragos to offer all-encompassing breach support for corporate IT & industrial OT environments. The new service combines NCC Group's Digital Forensic and Incident Response capabilities with Dragos' OT expertise and intelligence to provide clients with end-to-end incident response across IT and OT estates, protecting people, productivity, and profits.

This new service offering follows the November 2024 announcement of NCC Group and Dragos' partnership to deliver OT resilience. It also comes as NCC Group's DFIR capabilities were recognized by analyst firm, IDC, positioning NCC Group in the "Major Players Category" in the IDC MarketScape: Worldwide Incident Response Services 2025 Vendor Assessment.

Cyber threat actors can be known to target organizations where the greatest impact can be inflicted from the simplest attack. According to NCC Group research, industrials is the most targeted sector by ransomware groups, suffering 30% of all ransomware attacks. The message is clear - IT/OT convergence is a goldmine for attackers. When IT and OT systems are brought to a standstill by a cyber incident, the impact on an organization can be significant in terms of cost, downtime, productivity, revenue and reputational damage.

Dragos provides an effective OT cybersecurity platform for industrial and critical infrastructure to deliver on its global mission: to safeguard civilization. After nearly a decade of real-world experience handling landmark attacks on OT networks, Dragos understands the complexity and risks of industrial environments, which operate on massive scale with unique systems and exacting availability requirements and are not protected by IT cybersecurity.

NCC Group's and Dragos' specialist OT and DFIR teams are joining forces to help organizations prepare for and quickly respond to incidents, aiming to prevent threat actors from inflicting further damage, and reduce the financial and operational impact. NCC Group's new IT and OT retainer offering delivers DFIR that is scalable and tech enabled, leveraging global threat intelligence and incident response planning to maintain operational resilience.

Certain governments are now implementing cyber security and governance standards aimed at critical infrastructure with significant sanctions for noncompliance. NCC Group is helping clients to navigate these standards such as the NIST Cyber security Framework, NIS2 and the EU Cyber Resilience Act, and existing protocols such as the SANS ICS Five Critical Controls and the PICERL response model.

"NCC Group's Q3 Threat Intelligence report shows that global threat actors view industrials as a prime target, with 30% of all ransomware attacks targeting the sector. The OT environment presents a perfect storm of complexity, accessibility, and critical vulnerabilities, making it a high-value target for attackers and a costly risk to secure," commented Kevin Brown, COO at NCC Group. "Through our enhanced partnership with Dragos, we now offer a retainer service that brings together NCC Group's Digital Forensics and Incident Response capabilities, OT expertise, and global threat intelligence with Dragos' leading industrial cybersecurity technology and OT Incident Response capability. This unified solution empowers organizations to respond rapidly and effectively to cyber incidents across both IT and OT estates, safeguarding operational resilience and business continuity."

"The need for rapid response has never been more critical as industrial organizations face increasingly sophisticated and targeted cyber threats across OT and IT," said Louise Bulman, Vice President International, Dragos. "Our expanded partnership with NCC Group advances cyber resilience for these organizations by combining Dragos' OT expertise and threat intelligence with NCC Group's DFIR capabilities, all while leveraging the Dragos Platform. Together we're enabling organizations to defend against attacks, minimize disruption, maintain operational integrity, and align with regulatory requirements and frameworks."