CLOSE THE GAPS IN OPERATIONAL AND IT SECURITY