The federal government and private sector are still coming to terms with how to protect operational technology in an increasingly volatile threat environment.