5 Myths of Process Control Security - Part 1of 6

I am reengineering an old post now that I better understand how the blogsphere works.

The 5 DCS Myths

1. Process Control systems are different from normal IT systems. / Process Control systems are the same as normal IT systems. (two sides of the same misunderstanding)
2. It is technically challenging to affect/change/hack these systems and a person will (can) intervene to stop problems or fail safes completely protect.
3. DCS vendors are not aware of the risks or are not doing anything to protect from them.
4. Protection is achieved when the firewall is installed.
5. You cannot scan or update Automated Control systems.

Update:
Part 2 Here
Part 3 Here
Part 4 Here
Part 5 Here
Part 6 Here

Anyone have any more to add or replacments?