Despite assurances from critical infrastructure owners, current and former security officials say hackers have easy access to control systems.