I used to jo-ke (mistakenly) that the only secure way of protection of your control system from cyber att-acks is having an ‘airgap’ (ie your industrial control system has no connection to the internet or the ‘outside world’)