OT security

In operational technology the thing being controlled is physical, so the priorities invert.

In IT, the instinct is to protect the data and accept downtime to do it. On a plant, availability and safety come first, because stopping the process can be dangerous and restarting it can take days. That is not carelessness about security; it is a different consequence model. Advice imported straight from IT tends to be rejected for good reasons, and then all advice gets rejected along with it.