Because legacy OT systems can be especially vulnerable to cyberattacks, situational awareness is important to operators and defenders. But standard tools don’t work well because they only focus on silos of information such as cybersecurity sensors or control system data, making normal operations difficult to characterize and quantify. The UOP is an “intelligent dashboard” baseline profile that presents expected behavior of an industrial control system. This baseline enables defenders to observe and flag deviations and make appropriate operational decisions in real time.