Patching OT

Patching a plant may require stopping production, and stopping production may cost more than the risk being addressed.

There is also a real chance the patch breaks a certified configuration or voids a vendor warranty. So patch windows are measured in months or years and tied to planned outages. The security answer is not to demand IT timelines but to work out what protects the system in the interval, which is usually years.