"Consequently, even though the utility was up-to-date with all patching including security, the engineering supervisor did not realize that security was included." . . . .