Mastering MITRE ATT&CK for ICS with a Zero Trust