Most energy companies have focused on building up their IT cyber capabilities. But these cannot be simply deployed into the OT environment because of differences in the systems, data, devices, and critical dependencies.
Because of this inattention to OT, cybersecurity experts who can secure complex, aging, and interdependent infra-structure are hard to find.