Comment SCADA and Security are not yet integrated (Score 3, Insightful) 227
SCADA systems are not designed, implemented, or operated with network and application level security concerns in mind.
(Usually. The exceptions know who they are
Your compensating control is physical security to limit access to SCADA elements and programming. It costs more, but you have no sane alternative.
And before you get too cocky about that restricted air gap, consider Stuxnet turning such a strength into a weakness for exploit. At some point SCADA systems will be security conscious; that day is not today...