How patch management AND cybersecurity risk can coexist in harmony within OT environments