OT/ICS/Critical Infrastructure

In IT security, the priority is typically Confidentiality > Integrity > Availability. In OT, it's reversed: Availability > Integrity > Confidentiality. A power plant that goes offline kills people. A manufacturing line that stops costs millions per hour. An oil refinery that loses process control can explode. The consequence of a security control that causes a millisecond of latency on a real-time control loop can be physical destruction or loss of life. This single inversion changes every security decision — from patching (you can't reboot a running blast furnace) to network monitoring (inline inspection adds latency to control traffic) to incident response (isolating a compromised PLC might cause a worse outcome than leaving it running).