According to Weiss, the real focus has to be on coming up with a contingency plan in the event of an attack. Many deficiencies in control systems cannot be patched, he said. "There is no antivirus for it," he said. So the focus now has to be on resilience and recovery, he said.

Jaikumar Vijayan covers data security and privacy issues, financial services security and e-voting for Computerworld. Follow Jaikumar on Twitter at , or subscribe to . His e-mail address is .

in Computerworld's Security Topic Center.