As part of a mature cybersecurity program, organizations rely on penetration testing to find vulnerabilities before attackers do. But operational technology/industrial control systems are critical, and often fragile systems! How do we dare conduct pentests in these environments? Join Chris in a discussion of real-world experience testing water systems, an oil rig, and other critical systems - SAFELY.