Post-incident guidance that leads with the exposed device rather than the adversary. For a utility with one engineer, that is the usable document.
New guidance asks operators to build and test plans for running vital systems disconnected. The assumption underneath it is the story.