In the country’s mission to protect critical infrastructure, more can be done to defend small community water, electricity and gas providers against cyber threats.