Separating corporate IT from operational systems, and tightly controlling what passes between them, can help contain a breach ...