I think it’s completely sensible for critical infrastructure to be air gapped and for people maintaining it to go into the office. This should be in the same ca

I think it’s completely sensible for critical infrastructure to be air gapped and for people maintaining it to go into the office. This should be in the same category of jobs that cannot do remote work as doctors, nurses, etc that just have to be on site. This is not the time to do sweeping IT architecture changes. That being said, I think lots of normal companies have horrible IT security infrastructures that focus on compliance and covering peoples asses in case things go wrong as opposed to actual security. Those usually also make it hard for remote workers (vs BeyondCorp), which is now coming back to bite them.