Protecting industrial projects: Why security measures must be built in from the start