Control system SCADA

According to the Government Accountability Office (2003), historically, security concerns about control systems (SCADA included) were related primarily to protecting... 

It is required to manage the functional safety in entire safety lifecycle keeping the risk level of potential hazardous events at acceptable level. Thus, it is essential to modernize and improve when required the basic process control system (SCADA and DCS) and the safety-related systems including the alarm system based on experience from their operation and periodical risk assessment. In such process it is essential to consider carefully the human and organizational factors using relevant HRA methods to maintain adequate risk associated with operation of complex industrial hazardous plants. 

Simply, SCADA is a computer-based control system that remotely controls processes previously controlled manually. The philosophy behind SCADA control systems can be summed up by the phrase, If you can measure it, you can control it. SCADA allows an operator using a central computer to supervise (control and monitor) multiple networked computers at remote locations. Each remote computer can control mechanical processes (mixers, pumps, valves, etc.) and collect data from sensors at... 

Control systems, such as SCADA, can be vulnerable to cyber attacks. Entities or individuals with malicious intent might take one or more of the following actions to successfully attack control systems ... 

Microprocessor-based control systems are marketed under a variety of acronyms and not all will be true DCCSs. Of particular note are the Supervisory Control and Data Acquisition (SCADA) systems which form an increasingly central part of the operations of many industries (e.g. offshore oil and gas platforms, petrochemical complexes, pulp and paper works). SCADA describes a communications system whose principal function is to join instrumentation and control into a cohesive package(57) and, particularly, the supervision and management of remote ... 

Stand-alone systems. Multiloop controllers) or programmable logic controllers (PLC) typically used to control part of a process, and larger supervisory control and data acquisition (SCADA) systems/distributed control systems (DCS) used to control the process or service as a whole (e.g., bulk primary production plant, building management systems). These self-contained systems are a component of an automated manu-... 

The control system of the freeze-drying unit provides control, monitoring and documentation of the process. Such a system must be reliable and comply with GM P and GAMP (Good Automation Manufacturing Practice) demands with respect to computer validation. It should be SCADA (Supervisory Control and Data Acquisition) compatible. A possible hardware architecture is shown in Figure 2.55.1. 

The control system must also be SCADA compatible as shown in Figure 2.55.2. 

Control System Included in this classification are Supervisory Control and Data Acquisition Systems (SCADA), Distributed Control Systems (DCS), Statistical Process Control systems (SPC), Programmable Logic Controllers (PLCs), intelligent electronic devices, and computer systems that control manufacturing equipment or receive data directly from manufacturing equipment PLCs. 

Larger, commercial installations will also be equipped with a Supervisory Control And Data Acquisition system (SCADA). The SCADA system is connected via a data highway with the PLC(s) used in the system. 

Control And Data Acquisition (SCADA), Industrial PC systems, and Distributed Control Systems (DCS). Measurement and control systems and process management systems are often integrated together. Process Analytical Technology (PAT) is a special case implementing nonintrusive process instrumentation. 

The diagram in Figure 26.1 represents a typical SCADA-based control system and can be broken into five main system components ... 

Virus protection activities defined in a policy and procedure for governing vims protection for SCADA systems include methods for checking automation system data and software integrity, e.g., standards and requirements for installing fixes/patches for known automation control system problems. Periodic assessment of automation control system vulnerabilities are to be undertaken in the light of emerging knowledge. 

All capsule pipeline systems include a pipe, many capsules, an injection system to inject capsules into the pipe, a pumping system to pump the fluid and capsules through the pipe, an ejection system to eject the capsules from the pipe, an instrumentation system to monitor the flow rate, pressure, temperature, and the passage of capsules at key locations, and an automatic control system that uses programmable logic controllers and an SCADA (Supervisory Control and Data Acquisition). 

Four main units are used in the IMCS, which are the motor control unit (MCU), the feeder control unit (FCU), the circuit breaker control unit (CBCU) and the central control unit (CCU). A MCU is a microprocessor (micro-computer) based module which has integrated control, monitoring, protection functions, and a communication interface for the motor starter. An FCU is very similar to a MCU and interfaces communication for the plain feeder contactor or circuit breaker. A CBCU is also similar to a MCU but is used for incomers, interconnectors and busbar section circuit breakers. A CCU provides the facility to communicate simultaneously with MCUs, FCUs, CBCU, a distributed control system (DCS), system control and data acquisition (SCADA) and other digital information systems. Other discrete devices such as special protective relays can also be addressed by the CCU provided the software and porting systems are compatible. 

To date, process control systems like Programmable Logic Controllers (PLCs) have only enabled paperless operation in combination with SCADA (Supervisory Control and Data Acquisition) systems or as part of a DCS (Distributed Control System), which enable measurement and control actions to be recorded and used as part of batch documentation. Process control systems have the advantage that they focus on real-time data as a necessary part of both control and supervision. The real-time focus is very useful for implementing both active and proactive control when combined with, for example, statistical tools or predictive algorithms. 

The main system components include an interface system to the corporate ERP system, a central MBS, an EDMS, a Material Control System, a set of cell-oriented process control systems based on SCADA, PLCs and a few... 

Mr. Evans is a lead consultant in computer systems and medical device validation. He has 27 years experience with Supervisory Control and Data Acquisition Systems (SCADA) and Distributed Control Systems (DCSs) within the chemical and pharmaceutical industries. During the last 7 years, Mr. Evans has had specific responsibilities for ensuring the GMP compliance of these systems to U.S. Food and Drug Administration (FDA) and UK Medicines... 

Increasingly the senior technicians function as supervisors for computer control systems such as Distributed Control Systems (DCS) or Supervisory Control and Data Acquisition Systems (SCADA). These technicians need procedures that help them work with the electronic interface, generally as troubleshooters for when the electronic systems go awry, or for when the control systems fail. 

Basic Supervisory Control and Data Acquisition Systems (SCADA) Pressure testing for steel and plastic pipelines Hot tapping and stopping Characteristics and properties of natural gas Excavation safety Compressor operation Pipeline purging Valve maintenance Cathodic protection... 

Control System (BPCS), including functions of Supervisory Control and Data Acquisition (SCADA) system, the alarm system (AS) and Safety Instrumented Systems (SIS) performing defined Safety Instrumented Frmetions (SIF). Proper design of layers of protection is based on hazards analysis and risk assessment with consideration of human and organizational factors. It is essential to ensure required safety integrity level (SIL) for each of these layers. 

The necessity to imderstand qualitatively the behaviour of the infrastructure systems on one hand, and the SCADA, ICT and control systems on the other is the requirement to assess the risk associated with a particular infrastructure and in this way asses the involved vulnerabilities. 

The control system used is a PLC/SCADA solution (SIMATIC S7 and WinCC from Siemens). The S7 controller consists of... 

---