How Hackers Made Minced Meat of Department of Energy Networks

In this case, as reported on Ars Technica, it came down to little or no patch management. How simple?

If they had bothered to apply a little common sense, and had Felicia Nicastro's book, Security Patch Management, a lot of this could have been avoided.