It's always a good conversation piece with family members.

The corporate password policy.

Standardization is awesome and it helps reduce surface area and effort.

But you should not standardize equipment between ICS/OT and IT as you now share CVEs.

Think of it using the Swiss cheese model.

You would never expose a firewall management interface to the internet.

So don't expose an ICS/OT management interface to the Corporate network or internet.

IT and ICS/OT are not the same:

IT is concerned about data that is in databases.

ICS/OT is concerned about real time sensor data.