CPS protection is a maturing practice, which means the security of these critical systems must become more programmatic.