Consulting giant Accenture has announced it will acquire a majority stake in industrial cybersecurity firm Dragos — valuing it at $3.25 billion — alongside outright purchases of asset-discovery platform runZero and firmware-analysis startup NetRise. The total bill: roughly $4.1 billion. It is one of the largest single moves into operational technology (OT) security ever made by a professional services firm.

To understand why this matters, you need to understand what OT security actually is. Unlike IT security — which protects laptops, databases, and cloud servers — OT security protects the computers that run physical things: power grids, water treatment plants, oil pipelines, manufacturing lines, port logistics. These systems were never designed with the internet in mind, they are notoriously hard to patch, and they are increasingly connected to corporate networks that attackers already know how to navigate.

Dragos is arguably the defining name in this space. Founded by former NSA threat hunters, the company built its reputation tracking nation-state groups targeting industrial systems — groups like Sandworm and Volt Typhoon. Adding runZero (which specialises in mapping everything on a network, including the devices that shouldn't be there) and NetRise (which digs into firmware to find vulnerabilities in the chips and code inside industrial gear) turns Accenture's OT offering into a vertically integrated stack: see the assets, understand the firmware, detect the threats.

The strategic logic is straightforward. Accenture already has deep relationships with the utilities, defence contractors, and manufacturers that run OT infrastructure. It can now walk into those clients with a complete industrial security product suite, not just advisory services. For Dragos, the deal provides distribution at a scale no independent security vendor could build organically.

The timing is not coincidental. Attacks on critical infrastructure have intensified across every region. The US, UK, Australia, and their Five Eyes partners have published a string of joint advisories in the past two years warning that Chinese and Russian state actors are pre-positioning inside OT networks — not necessarily to cause immediate disruption, but to have options in a future crisis. That threat environment is turning OT security from a niche specialism into a board-level procurement priority.

For Australia, the implications are direct. The Security of Critical Infrastructure (SOCI) Act already mandates that operators of critical infrastructure — including energy, water, ports, and communications — manage cyber risk across their assets and supply chains. Australian entities using Dragos or planning OT uplift programs should be watching how the Accenture integration unfolds: if the combined entity lifts prices or shifts product focus toward larger US federal clients, mid-tier Australian operators may find their options narrowing.

What to watch: Whether Dragos's threat-intelligence community culture survives absorption into a 700,000-person consulting machine. Some of the most respected OT researchers in the world work at Dragos; retention will be the acid test of whether this is a genuine capability acquisition or an expensive logo purchase. Accenture has done this kind of deal before — it bought iDefense and Context IS over the years — and the track record is mixed.

The deal is expected to close later this year, subject to regulatory approval. Given Dragos's US government relationships, a national-security review is plausible.