Remember that in some countries the control systems are under nationalised control, or indeed have switched from nationalised to privatised models within the last 30 years. That different business model can produce different approaches. Also, the regulation of the actual network (regardless of security) can be different, and thus (again) produce different approaches.

For example France’s network has a lot of inbuilt redundancy, so that if a generator is offline a particular region can be backfed. That can mean that the cyber threat is at least harder since multiple targets needs to be hit simultaneously. Summing up my point, don’t forget that the engineering itself changes the threat landscape and attack surface.

Lastly, some countries (for example: the UK, Spain, Sri Lanka, and Venezuala) have been dealing with terrorism for quite a long time. This operational knowledge of how to continue functioning in the face of sabotage can make many aspects of awareness raising or infrastructure hardening much much easier.