I get your point but, while offline you could still get infected via physical media USB, CD, FLOPPY.

What I'm trying to say is that if a nuclear facility got hit and their machines where offline (from the internet) its still possibly to infect the rails using the Stuxnet attack vector.

But yes the claims are sensationalist, a better solution would be to increase security protocols and make standards out of those and have companies follow those in a more strict way.

Now taking them off the internet is not going to sell overpriced, over-engineered, ineffective products designed to "fix" these "issues" ;-)

If Panetta is talking about specific "cyber-defense" capability, L3, or Lockheed (etc.) probably already have a product in the making and fulfills some of these requirements. They just need the law to be passed and the purchase order signed.

unfortunately i think 100% is quite an overstatement. (given that we're talking about people dying, and all).