Utilities and energy companies spend huge amounts for physical security but slight information-technology security. The Ponemon Institute’s “State of IT Security: Study of Utilities & Energy Companies” found that 29% of respondents said their organization’s budget for security ranged between $20 to $40 million per year. Only 32% believe their security organization is “dedicated to protecting the nation’s critical infrastructure” Less than half believe their organizations “see security as a strategic priority across the enterprise,” or use “state-of-the-art technologies to minimize risks to SCADA networks””]
Source: https://www.csoonline.com/article/2127975/do-utility-companies-slight-it-security-.html