The applications of connected industrial devices have created unprecedented productivity and efficiency gains but have also exposed previously unreachable critical infrastructure systems to attack from a range of malicious groups with varying motivations. This applies not only to information technologies (IT), but also the technologies that are relied upon to operate essential services; also known as cyber-physical systems, operational technology (OT). Many of these IT and OT systems that used to be segregated, are now becoming increasingly integrated to drive smart critical infrastructure initiatives across various agencies to serve citizens and businesses.