Cybersecurity threats to Operational Technology (OT) have grown, and federal mandates are increasing pressure to secure critical infrastructure. Many organizations are still learning to tackle such a massive undertaking and would benefit from a methodology toward navigating the risks and requirements. This session explores an approach toward building a dedicated cyber capability for OT.