Comment Re:Have a back-up system in place.... (Score 1) 79
One can have monitoring systems connected to the Internet without connecting OT or production lines to the Internet -- although that may mean that your adversaries hack your CCTV and watch your people going to work.
And then some moron on the networking team decides it will save a few bucks to run everything as VLANs on a single switch, so that when (not if) that switch gets compromised, everything becomes accessible to attackers. Not that I'm bitter or anything.