There are some situations where there is a genuine need for data to be air-gapped, i.e. defence, highly sesnsitive secrets, etc. I've encountered this a few times and a once or twice I felt it was truly justified as opposed to being overly paranoid.
However these days I see a hybrid model in which the truly sensitive stuff is in an on-site datacenter and there is a one-way "data diode" style transfer from the low security zone to the higher security zone.
Comments
There are some situations where there is a genuine need for data to be air-gapped, i.e. defence, highly sesnsitive secrets, etc. I've encountered this a few times and a once or twice I felt it was truly justified as opposed to being overly paranoid.
However these days I see a hybrid model in which the truly sensitive stuff is in an on-site datacenter and there is a one-way "data diode" style transfer from the low security zone to the higher security zone.