Protecting information in critical infrastructure