Industrial (ICS/IIoT) cyberattacks rightfully gain attention: the 2017 probing of the US power grid, the 2016 attack that turned out the lights in Kiev and the 2015 attack that took down portions of Ukraine’s power grid. But nuance is needed to extract lessons learned. This presentation will contain firsthand accounts of these and other cases with actionable recommendations for defense.Learning Objectives:1: Educate attendees on industrial cyberattacks and when concern is warranted.2: Dispel hype and misconceptions that often drive unnecessary fear.3: Impart actionable defense strategies and tactics from firsthand experiences.