Targeted ransomware is the new normal - high-stakes extortion using sophisticated, nation-state attack techniques. Secure sites deal with this threat - not by reducing the likelihood of OT shutdowns due to ransomware, but by eliminating that risk entirely. After all, there are less than a dozen ways that ransomware can enter an OT network. In this presentation we explore a different way of looking at the problem - how to block all of those dozen ways, how to configure our OT networks to survive IT network failures, how to deploy secondary defences much stronger than the usual "defence in depth" advice and how to do all this while still enjoying the benefits and the efficiencies of modern IT/OT integration.