Rather than attempting to catalogue every possible control or threat, this research focuses on helping CIOs make informed decisions about where to focus attention, funding, and leadership effort first. The research translates the complexity of OT such as ICS, SCADA, PLCs, and IIoT into a structured assessment, prioritization, and action framework that can be applied immediately.