Practices such as network segmentation and least privilege are already mature in the IT security field, but their adoption rate in the operation and maintenance of OT (operational technology) equipment remains low.