Sophisticated attacks on automation and controls systems are intensifying as more intrusive and structured cyber threats, capable of critically damaging operations and services for millions of people, becomes the norm. The Department of Homeland Security contributes today’s enhanced risks to the increase in Internet accessible configurations, the availability of control system specific exploitation tools, and a heightened interest by global threat actors.