Here’s what it would take: stronger defenses for large utilities, hands-on help for smaller systems and federal support to make both happen.