As attacks on critical infrastructure and industrial control systems become increasingly brazen, ICS defenses must go beyond just preventative security. Control system defenses must be ICS-specific, teams need to be proactive and have ICS cyber specific knowledge and skills.