If energy companies believe that they can detect cyber attacks without having the right tools, what does this say about their understanding of the challenge and perhaps even their attitude to the cyber risks they face?