Why critical infrastructures need to comply for OT cyber security norms?

Why critical infrastructures need to comply for OT cyber security norms?