content: Or just keep the industrial equipment on a separate network from the internet and air gap the two. At the end of the day someone can pull the data from the equipment network put it on a flash drive and post it to the rest of the network if you need multi site information. Nothing goes the other way except by approved and actually trained people. No one but the local guys care to check it more often anyhow no matter what they say about wanting to see it, well unless they are trying to micromanage a plant manager and those guys don't really care for that kind of behavior anyhow.