A formula does not lose value because the process moved to a new server.
Designs, formulas, production processes, and product engineering keep competitive value for decades. At the same time, much of the technology around them is operational: equipment that cannot stop, with a life cycle measured in many years and replacement that depends on the manufacturer.
The industrial cohort is the largest on the operational ruler and occupies a middle position among the sectors with their own page: more exposed than technology, less than government and healthcare.
Cohort distribution by band
- Critical80.9%
- High3.7%
- Moderate0.2%
- Minimal15.3%
The relevant horizon here is competitive advantage, not contract term: a production process captured today and decrypted later would still be useful to a competitor if the product is still in production, and industrial products usually are.
Data the sector keeps for a long time
- Designs, formulas, and product specifications.
- Process parameters and production engineering.
- Supply contracts and long-term agreements.
- Unpublished research and development data.
Industry combines durable trade secrets with a rigid operational environment: the technology controlling production has availability constraints that office technology does not, and the decision to replace is rarely the operator's alone.
- Trade secrets with long-term competitive value.
- Operational technology with continuous availability requirements.
- Equipment cycles measured in many years.
- Dependency on the manufacturer for any cryptographic change.
Typical dependencies
- Equipment and control system manufacturers.
- Integrators responsible for the operational environment.
- A supply chain with direct digital integration.
- Connectivity providers between plants and headquarters.
What applies
With an operational environment sensitive to interruption, the external readout is what fits, and the manufacturer chain is usually where prioritization pays off most.
See the limits of this reading and what it is measured against
The limits of this readout
- Collection does not reach isolated operational networks, which is where part of the risk lives.
- The assessment is external and does not interact with industrial control systems.
- The readout does not estimate cost, timeline, or feasibility of replacing equipment.
- Sector medians authorize no conclusion about a specific company.
Boundary
Measurement ends at the technical change in the environment. Measuring exposure does not reduce it: reduction requires changing configuration, replacing certificates, switching negotiation policy, or migrating libraries. That work is carried out by the organization's own teams and suppliers. After the change, GWK re-collects public signals and recalculates IEQ on the same ruler, when contracted to do so.
Why measuring does not reduce exposureWhat this comparison is measured against
- Ruler generated
- October 7, 2026
- Population
- 80,182 companies
- Sectors
- 15 sectors in the engine taxonomy
- Anonymity floor
- K = 30
Limits of the comparison
- The ruler is a static reference base, not a continuous measurement: there is no automatic update between one run and the next.
- Comparison is always against anonymous aggregates, never against another organization's individual result.
- A public-mode result does not compare to a complete-mode result, because the two readings start from different kinds of evidence.
Start from the corporate surface
The external readout does not touch the operational environment and already shows corporate and chain exposure, which is where the prioritization decision usually starts.