SCADA Systems collect a large volume of very useful data and provide many tools for conveniently reviewing and analysing those data. Individuals whose job involves system planning, customer engineering, and system protection (e.g. relay settings for breakers) need these data. It is possible (I have done so) to leverage the SCADA data to create a fairly complete external database and user interface that is adequately firewalled from the SCADA system, and thereby avoid creating vulnerabilities. (Two different penetration tests have demonstrated this.) Unfortunately, vendors are just catching on to security, and are only starting to provide this. Unfortunately, at least so far, what is offered is essentially un-auditable (short of an expensive code review). Things are slowly getting better, but many utilities are still using older software, and will only spend the money to cure this as the new FERC Cyber Security Standards come into enforcement over the next few years. Indeed, there may still be regulators who see cyber security as an unnecessary waste of customer's money. (Much of the utility industry is still regulated.)

My opinions are mine only and do not represent the opinions of my employer, who also shall remain anonymous.