In recent years, factory equipments had started to connect to the internet or even the cloud. Cybersecurity has become a must in OT environment.the However, the tranformation process can be challenging, there are lots of products and solutions in the OT field. How can we build up our owned security orchestration which is aline with our environment and culture? This security orchestration can be built step by step, but we need to have a whole view before we choose the productions. In this speech, we will let you know what you should consider with and prorities the implementations steps.