So, can someone please explain me why "Closing off the department’s computers to the Internet is a complicated matter"? I mean is it so hard to have sensitive databases on an internal network, that is disconnected from the outside world and only has a limited white list of media devices that can be connected to it?