What always puzzles me about this stuff and critical infrastructure like nuclear powerplants, is why is an internal network connected to the public Internet at all?
If you have to connect it to the Internet, then why is it talking to unknown devices?