Initial Entry into an ICS system is generally done via compromise of internal resource or enterprise network entry. A common data-historian that is easily compromised is the combination of Windows Server + SQL Server.