Securing SCADA Systems: Why Choose Compensating Controls?