Start on a flat, default-config network with a high risk score, then apply hardening controls one at a time and watch the attack surface shrink — each toggle explains what it blocks.
Interactive OT cybersecurity lab: apply hardening controls to a BAS network and watch the risk score and attack surface drop.