Historically, companies have struggled keeping OT systems up-to-date, thus prioritizing stability over security.
Delays and downtime cost lots of time and money, which is one of the reasons why some OT systems are left as they are for years. In many cases the cause is the impossibility to suspend the operation of this kind of systems to proceed with the installation of software updates.
That is why OT systems may offer vulnerabilities which are perfect for hackers who are looking for exploits and routes into industrial networks. It’s a no brainer that OT security is fundamental as breaches can have huge and unbearable consequences.
Not having any OT security in place is like travelling on the highway at night with the lights off.