Why is it more challenging to quantify and articulate cyber risks in Operational Technology (OT) compared to Information Technology (IT) cyber risks? How can we, as defenders, better understand and communicate OT cyber risks across the organization—including IT teams, the board, and compliance departments? These risks typically have low frequency but high impact. We can also use Tabletop Exercises (TTXs) to improve understanding. Additionally, we should consider mitigating risks through the Dragos platform and exploring the option of transferring risks to insurance partners.