Say what you want about cybercriminals, but they are certainly opportunistic and all too willing to take advantage of misfortune. Natural disasters are no exception.
The perpetual struggle with operational technology and industrial control systems is that they were designed with one thing in mind: reliability. These systems are meant to run 24/7 with minimal downtime and, unfortunately, maximizing security often comes second to that. On the bright side, there are three problems (or opportunities) on which to focus that will significantly reduce an attack surface while still ensuring that systems are reliable and resilient: Preparation, practice and people.