People should start preparing for a major cyber attack on critical infrastructure