This article by Charles Landis notes that you may want to consider hiring an expert to design a process control security program that is in your best interest financially and operationally.