Easy, you don't connect the control systems to the monitoring systems.

It doesn't need to be perfect, it only needs to be better than what it is today (predictable passwords)