"Our plant network isn't connected to the internet" — why that sentence won't save your production

When I visit industrial sites, I almost always hear the same sentence: "Our control network is separate; it isn't connected to the internet." Then we draw the real map of who talks to whom, and the fo