A verified identity on an unpatched laptop is still an exposure. These are the four posture checks worth enforcing for plant engineers, and how to roll them out without flooding the help desk.