In industrial environments, the boundary between SCADA systems and corporate IT networks is often assumed to be secure. Yet in many architectures, these two domains are more connected than most realize. Whether through shared infrastructure, reporting interfaces, or vendor access, attackers increasingly exploit these connections to move laterally between operational and enterprise zones .   When a threat actor gains a foothold in one environment, the next objective is almost