Critical infrastructure asset owners and operators have long faced the challenges of operating an aging system with limited resources, increasing customer demands, and ever-increasing risks. The expanding cyber security risk of criminal ransomware and extortion attacks resulting in impacts to manufacturing and production facilities is a risk that is facing business leaders across all industries with a particular OT (operational technology) nuance requiring additional management awareness.