Recent incidents involving internet-connected operational technology (OT), ransomware and unauthorized access to municipal water systems have demonstrated how fast a cyberattack can undermine public confidence, strain critical services and pressure organizations into making high-stakes decisions with incomplete information.