Should the plant networks be isolated or protected by Firewalls to make them secure. Often the plant networks also need some kind of health monitoring / trouble shooting by third-party remote system integrators. how could such access get enabled with plant security in place.