Isolate hard-to-patch systems from cyberattacks