NCC Group and Dragos launch new IT/OT convergence retainer service

4 November 2025 - NCC Group, a people-powered, tech-enabled global cyber resilience business, announces an enhanced partnership with Dragos Inc., a global leader in Operational Technology (OT) cyber security technology, to offer all-encompassing breach support for corporate IT & industrial OT environments.

The new service combines NCC Group’s Digital Forensic and Incident Response (DFIR) capabilities with Dragos’ OT expertise and intelligence to provide clients with end-to-end incident response across IT and OT estates, protecting people, productivity, and profits. 

NCC Group’s DFIR capabilities were recently recognised by IDC, positioning NCC Group in the “Major Players Category” in the IDC MarketScape: Worldwide Incident Response Services 2025 Vendor Assessment.

Cyber threat actors can be known to target organisations where the greatest impact can be inflicted from the simplest attack. With 30% of ransomware attacks (NCC Group: Cyber Threat Intelligence Report Q3) targeting industrials, more than any other sector, the message is clear: IT/OT convergence is a goldmine for attackers. When IT and OT systems are brought to a standstill by a cyber incident, the impact on an organisation can be significant, in terms of cost, downtime, productivity, revenue and reputational damage.

NCC Group’s and Dragos’ specialist OT and Digital Forensics and Incident Response teams (DFIR) are joining forces, to help organisations prepare for and quickly respond to incidents, aiming to prevent threat actors from inflicting further damage, and reduce the financial and operational impact.

NCC Group’s new IT and OT retainer offering delivers scalable and integrated DFIR, leveraging global threat intelligence and incident response planning to maintain operational resilience.

Certain governments are now implementing cyber security and governance standards aimed at critical infrastructure with significant sanctions for noncompliance. NCC Group is helping clients to navigate these standards such as the NIST Cyber security Framework, NIS2 and the EU Cyber Resilience Act, and existing protocols such as the SANS ICS Five Critical Controls and the PICERL response model.

Kevin Brown, COO at NCC Group commented: “NCC Group’s Q3 Threat Intelligence report shows that global threat actors view industrials as a prime target, with 30% of all ransomware attacks targeting the industrials sector. The OT environment presents a perfect storm of complexity, accessibility, and critical vulnerabilities, making it a high-value target for attackers and a costly risk to secure. Through our enhanced partnership with Dragos, we now offer a retainer service that brings together NCC Group’s Digital Forensics and Incident Response (DFIR) capabilities, OT expertise, and global threat intelligence with Dragos’ leading industrial cybersecurity technology and OT Incident Response capability. This unified solution empowers organisations to respond rapidly and effectively to cyber incidents across both IT and OT estates, safeguarding operational resilience and business continuity.”

Bulman, Vice President International, Dragos, commented: “The need for rapid response has never been more critical as industrial organisations face increasingly sophisticated and targeted cyber threats across OT and IT. Our expanded partnership with NCC Group advances cyber resilience for these organizations by combining Dragos’ OT expertise and threat intelligence with NCC Group’s DFIR capabilities, all while leveraging the Dragos Platform. Together we’re enabling organisations to defend against attacks, minimise disruption, maintain operational integrity, and align with regulatory requirements and frameworks.”

• Industrials is the most targeted sector by ransomware groups, suffering 30% of all ransomware attacks (NCC Group: Cyber Threat Intelligence Report Q3).
• NCC Group’s new retainer service combines Dragos’ technology, global threat intelligence and extensive experience and capabilities to deal with the range of cyber emergency affecting organisations’ IT or OT estate.
• Satisfy regulatory requirements by adhering to compliance standards and frameworks like the Cyber Resilience Act, CAF and NIS2.

Find out more about how NCC Group can support you: https://www.nccgroup.com/incident-response/cyber-incident-response-retainer/