How should we prepare for future cybersecurity risks to our critical national infrastructure? Technology is changing fast, and as it changes it can create new possibilities of troubles and disasters. What do we do to avoid being taken by surprise?