Today ICS Security tools focus on visibility. While we all embrace the “you cannot secure what you cannot see” principle, we should not forget that “seeing and understanding are two different things”. In this presentation we will describe Risk Analytics model for industrial network, and how the risk can be automatically analyzed by the advanced security monitoring system today. Above all, we will see how ICS-focused risk analytics systems help operators to continuously and efficiently (ROI-based) improve their network security and to reduce the potential risk of a cyber-attack.