I have a background in traffic control and have just started the SANS ICS410 course. It's scary how much the security depends on the network. No defence in depth.