Industrial Cybersecurity & OT Risk worked example

OT Vulnerability Backlog at 98% target remediation capacity utilization: a worked example

Push target remediation capacity utilization up to 98% and the picture changes. This example computes every intermediate figure at that operating point. Use it when prioritizing vulnerability remediation across patch windows, vendor constraints, and compensating controls.

The inputs for this scenario

  • OT vulnerability remediation backlog: 420 hours (unchanged)
  • Available OT remediation capacity: 520 hours (unchanged)
  • Target remediation capacity utilization: 98 % (raised for this scenario; the documented default is 85)

Working through the calculation

  • Applying the documented formula (OT vulnerability backlog utilization = OT vulnerability remediation backlog รท available OT remediation capacity) to the inputs above produces each figure below.
  • At this operating point the engine returns 80.77 % for ot vulnerability backlog utilization, the number this scenario is built around.
  • At this operating point the engine returns 17.23 points for ot vulnerability backlog utilization gap.
  • At this operating point the engine returns 420 hours for ot vulnerability remediation backlog.
  • At this operating point the engine returns 520 hours for available ot remediation capacity.

How this compares with the baseline

  • Against the tool's baseline example, where target remediation capacity utilization sits at 85% and the headline result is 80.77 %, this scenario lands almost exactly on the baseline at 80.77 %.
  • It computes the ratio of OT vulnerability remediation backlog hours to available remediation capacity, plus the gap to your target utilization. The value of this scenario is the size of the gap it exposes: that gap, priced out over a year, is the budget you can justify spending to close it.

Results at a glance

  • OT vulnerability backlog utilization: 80.77 % (headline result)
  • OT vulnerability backlog utilization gap: 17.23 points
  • OT vulnerability remediation backlog: 420 hours
  • Available OT remediation capacity: 520 hours

Run it with your numbers

  • Every input above is editable in the live OT Vulnerability Backlog calculator, which recalculates instantly and can be shared with the inputs intact.

Last reviewed 2026-05-12.