Why Electric Utilities Must Reassess Security Practices