Identifying and addressing critical OT asset vulnerabilities