In other words, it doesn’t really matter if your local utility has top-tier cybersecurity if their upstream partners don’t bother. One weak link, and the whole chain shakes.