Cyber-security practices in critical infrastructure traditionally relied upon isolation of the operational networks from the enterprise environment and the outside world to avoid attacks and minimise incidents. Today, that approach is no longer tenable as increased connectivity and converged platforms have blurred that divide.