Engineering360: "Ransomware May Pose a Threat to Industrial Process Controllers"

The best way to fight ransomware is frequent backups to alternating hard drives ("ring buffering").

Even if someone broke into my systems and locked it up, so what?

I'll just swap out my hard drive and reboot. I'm back in business in a couple of minutes, and I have the other drive intact for forensics.

I might be missing something here but why is anyone putting something so vital as power and water plants on something so vulnerable as the internet?