Learning OT cybersecurity requires a focused approach. Start by understanding the interplay of processes and systems rather than fixating on individual devices or protocols. In OT, a single device rarely leads to significant issues; instead, it’s the complexity of industrial processes that matters. Adversaries often exploit vulnerabilities by tampering with these intricate systems rather than using traditional hacking methods. Grasping what a “bad day” looks like in an industrial setting—usually not linked to malware—is essential. Choose one specific process to study in depth. OT encompasses a wide range of systems, and without a targeted focus, it's easy to become overwhelmed. Pick a process you're familiar with or one that genuinely interests you. Dive into its general chemical, electrical, and mechanical aspects, along with safety controls and digital systems. Achieving a thorough understanding of one process will provide a solid foundation for learning others. Safety and process continuity should be your primary focus. Cybersecurity in OT aims to maintain safe operations and regulatory compliance. If your studies drift into unrelated areas like malware or general IT audits, you’re likely missing the core principles. Familiarity with older computers is also crucial. Many systems in OT still run on legacy hardware and protocols from the 80s and 90s. Without understanding these foundations, you’ll struggle to adapt in the field. Many hiring managers assess candidates on their knowledge of older technologies. Lastly, utilize free resources for self-study. The field has few university programs, so learning from experts like Mike Holcomb and Rob Lee, along with organizations like SANS Institute and Idaho National Laboratories, can provide valuable insights without the cost of formal education.