Air-gapping is a start.

Critical National Infrastructure should go further, as Iran found out with Stuxnet.