Start with the facility, not with a product catalog

We map the current systems, critical events, operator roles, and integration limits — then define the right control architecture.