Ransomware was behind 95% of cyber attacks that caused physical outages for industrial processes and critical infrastructures in the last three years. This is a finding from a new report that analyses incidents in the new ICSSTRIVE industrial and OT incident repository. A second finding: there are only three ways that ransomware and other attacks are causing these outages. This presentation introduces the new Secure Operations Technology methodology as a tool to address this threat. Andrew Ginter will show how to use the methodology to reliably defeat all three kinds of ransomware and other cyber-sabotage attacks, including even sophisticated nation-state attacks. The analysis also shows that attacks with physical consequences are increasing exponentially - urgent action is required to address the threat.