The sophistication and frequency of cyberattacks have increased as a result of the growing use of Industrial Internet of Things (IIoT) devices to manage critical infrastructure (CI) facilities. This enhanced threat vector heightened the possibility of interference and damage to critical infrastructures that threatens the life, economic stability and/or national security of a country. The strategies and operational methods used to defend critical infrastructures must be in line with the new risks and dangers associated with the use of IIoT devices and systems in order to stop the escalation of such incidents. Additionally, this growth necessitates a paradigm change in how cybersecurity risks are perceived, addressed, and controlled. In addition to offering ideas that can be put into practice to lessen the increasing IIoT cybersecurity threat, the article aims to reflect on how the adoption of IIoT devices and systems altered the cybersecurity threat landscape for critical infrastructure. Refocusing attention on the significance of cybersecurity governance, particularly how a developmental or maturity approach could improve cybersecurity resilience at CIs, is one of the strategies that will be advocated.