Boards and investors increasingly expect OT cyber risk to be expressed in the language of financial impact, not just technical severity. This session explores how to quantify industrial cyber risk, linking specific threats, vulnerabilities, and asset criticality to potential loss, so leaders can prioritize investment where it matters most. It covers frameworks for modeling exposure across energy and critical infrastructure operations and communicating that risk to non-technical stakeholders. Attendees will learn how risk quantification helps operators act before a threat becomes a costly incident. (#SSCTRI)