At the high end you can use data diodes to isolate critical data.