The environment, energy, and infrastructure (EEI) sectors increasingly use digital technologies to capture data, improve and expand service delivery, and optimize system performance. However, as industrial systems continue growing their digital footprint while incorporating emerging technologies, they are increasingly vulnerable to cyber attacks. EEI systems are attractive targets for state and non-state cyber attackers precisely because they can cause severe damage. A 2019 Siemens/Ponemon Institute survey of over 1,700 gas, wind, water, and solar utility professionals found that more than half reported “at least one attack involving a loss of private information or an outage” in their operational technologies environment in the past 12 months. This statistic is particularly alarming because these utilities often constitute critical infrastructure—assets vital to the security, economic welfare, and the public health and safety of a state.