Industrial control systems seen as vulnerable