Air-gapping...
Doesn't give complete protection - systems need complete physical protection to prevent accidental introduction of nasties. I remember reading about a US drone control site that was still infected because someone brought in an infected USB drive.