The convergence of IT and OT technologies in SCADA deployments introduces new cybersecurity vulnerabilitiesby expanding connectivity and increasing interoperability and cross-domain data exchange. However, thevulnerability mechanisms, mitigation technologies, and their effectiveness are not uniformly understood. Thisstudy aims to address what vulnerabilities and risks arise from IT–OT convergence in SCADA, what technologiesthe literature proposes to identify and mitigate these issues, and how effective these technologies are at resolvingthe reported risks and vulnerabilities. A systematic literature review was conducted using a structured searchstrategy combining SCADA and IT-OT convergence terms with cybersecurity, vulnerability, threat, and exposurekeywords, followed by staged screening at the title and abstract level and full-text eligibility assessment. Findingswere then synthesized thematically to extract recurring vulnerability patterns, mitigation approaches, and anyreported evidence of effectiveness. The review literature suggests that IT-OT convergence commonly enablesexploitation pathways through weak access control, authentication and authorization gaps, and bridging layers.At the same time, mitigation approaches frequently focus on architecture aware defenses such as segmentation,secure remote access, identity and access management, and OT aware detection.