Post-incident guidance that leads with the exposed device rather than the adversary. For a utility with one engineer, that is the usable document.
The equipment is not unpatched through neglect. It is unpatchable — commissioned to run continuously for thirty years, by a vendor that may no longer exist.
A small municipal utility has the operational exposure of critical infrastructure and the budget of a town department — and no route into the record.