The design philosophy to stop such events is pretty straight forward. They can protect critical systems by keeping them disconnected from any external networks. They only way to hack such a system would be to have physical access or if it were somehow hooked up to an external network.