[balabaster]

Having spent half a decade working in Oil & Gas flow control systems directly, I can confirm that 10 years ago when I left that industry, cyber security was still not even a consideration. Light years behind wasn't an accurate statement - non-existent was more accurate.

Admittedly computer systems have come a long way in ten years, but given the attitudes and technical expertise of a lot of the people I worked alongside, I would say there's a reasonable chance the needle hasn't moved very far.

They're excruciatingly good at getting oil out of the ground and getting it to market, but they're not going to be winning capture the flag at Defcon or Blackhat any time soon...