See the latest publications about ICS vulnerabilities published by the US CERT.So you know what to go for during the pentest. ;-)