Much of today's industrial control systems (ICSs), including those in critical infrastructure industries like energy and utilities, consist of outdated technology connected to IT networks and infrastructure. This linkage has left them vulnerable to an array of malicious actors salivating to attack. We talked to a number of security professionals in operational technology roles and found that traditional IT security measures don't stack up. This report outlines advanced technologies to protect ICSs and offers practical Zero Trust strategies to enhance security.