Great article. I like the comment, "They should paint a picture of the threats in the factory – inadequately secured controllers, outside technicians performing routine maintenance, and the network’s connectivity to outside sources.". Its important to point out that many threats are unintentional - so physical security on the factory floor plays a key role here! Raising security to an executive level is important.