I would suspect that private industry is clever and motivated enough to keep their technology secure, but sometimes I wonder. Not long ago I thought Wall Street investment banks were clever enough to keep from going out of business, and as documented in 'The Big Short' by Micheal Lewis, we know what happened. Does drive for short term profit really cause senior managers to overlook the fundementals? Is security one of those fundementals?
Government run facilities and 'utilities' to me seem another story completely. Are the people that run these organizations really equiped with the people, technology, and motivation to keep systems secure from outside threats? If there is at least a bit of concern, what's wrong with another set of eyes from the NSA keeping tabs on malicious threats. We all know they are there and that the next war will be fought with silicon rather than steel.