Operational security control for critical infrastructure