Penetration testing should be considered for all Information Technology, Operational Technology and Internet of Things systems.