See this blog posting, by my friend Eric Holdeman, on the new report: Bolstering Critical Infrastructure Resilience.