Despite a growing number of attacks on industrial control systems (ICS), organizations are falling behind on security improvements and in many cases they refuse to share threat information with others, according to a survey conducted by the SANS Institute.