Combining these ICS testing approaches hits the sweet spot, where onsite ICS tests can provide guidance about which devices should be tested in the lab. This provides a far higher level of assurance ...

This is a story of that process, but with a twist at the end. It serves as a lesson that pen testing can never be automated.