CYBERSECURITY & CRITICAL INFRASTRUCTURE – ARE WE MISSING THE OBVIOUS?