. . . "If you have a true air gap ??? complete disconnection of some or all of your control network from any external network ??? then that system is invulnerable to distributed denial of service attacks, remote control attacks, worms and any other network-based attack originating on an external network, including the Internet." .