The experts say any computer or network connected to the internet can be penetrated, given time, effort and resources.
So why are the lights still on, the wi-fi still working? Maybe it’s harder to mount this kind of attack than we think. The hacker can break in, but you need intelligence systems to reconnoiter and engineering knowledge to understand how to modify a system. So maybe those that can do it do not want to, and those that want to have not yet thought of it. Maybe for the jihadist cyberattack lacks the gore of suicide bombing.
So who should do what to improve security? First of all we need more facts. We need to map our infrastructure and understand the single points of failure. We need better measures of how much data is being lost, from both industry and government. But this creates more headaches: how do we share info on attacks?