You can't do effective ICS/OT security from behind a desk. You have to put on some steel toes and leave the office. Visit operations. Walk down the plant(s). Get to know managers, operators and the various trades. Put eyes on the situation.