The United States has the most observed internet-exposed industrial control systems (ICS) of any country due to broad remote access implementa?on. The ICS cyber exposure of the United States is primarily due to broad implementa?on of remote access for operator convenience; the size, age, and diversity of the na?onal industrial base; and complex supply chains amplified by cybersecurity personnel shortages which can perpetuate default insecure or misconfigured ICS. Sectors with geographically distributed or large-scale industrial opera?ons—such as water & wastewater, energy, cri?cal manufacturing, and food & agriculture—are especially reliant on remote access which can be internet-exposed and readily discoverable.