Why do the water systems need to be connected to the internet at all? If the systems are completely disconnected from the internet there shouldn't be much cybersecurity risk. Of course there still needs to be proper precautions to prevent a Stuxnet type worm getting through.