IT-side measures such as patch management and endpoint detection cannot be directly applied to OT environments, because a single reboot can halt production lines or even cause physical accidents.