Penetration tests and red team exercises in OT environments are distinct from their IT counterparts. Due to the increased risks associated with OT, it is essential to exercise a much greater degree of caution. This presentation will offer guidance on appropriate actions to take in OT production environments and advise on how to match the level of risk in your test to that of the target environment.