NSA and CISA offer some advice for critical infrastructure operators to protect their industrial control systems.