Skip to content
Merrow

Industry

Critical Infrastructure

Logistics, energy and utility contractors where an outage has consequences well beyond the balance sheet.

Regulatory context

NIS2-adjacent obligations are extending down the supply chain to contractors who serve regulated operators directly.

What we hear from this sector

  • OT/IT convergence expanding the attack surface faster than governance can track it
  • Contractor obligations flowing down from regulated primary operators
  • Limited internal security headcount relative to operational scale