The air gap is a myth and other OT security truths

This interview with an OT security director argues that attackers target control and availability in industrial environments (not just data theft), dispels the myth of widespread air gaps, and describes defensive practices: negotiated containment trigger points, passive network visibility for legacy controllers, segmentation coupled with rehearsed degraded-operation recovery, and treating ransomware as an economic extortion problem to reduce downtime and attacker leverage.