Many OT environments are built on legacy systems that lack basic protection. At the same time, more industrial systems are being connected to the internet and cloud services, increasing exposure to attacks. In addition, clear security processes and business continuity plans are often lacking.