SCADA

SCADA: Control system for monitoring and operating geographically distributed industrial processes. SCADA systems form the upper layer of operational technologyOperational TechnologyHardware and software used to monitor or control physical equipment, machinery, and industrial processes. in power, water, and telecontrol environments.

How it works and where it fits

A SCADA system collects measurements from field devices, presents them on an operator interface, archives them, and sends control commands back. Controllers and remote terminal units make up the field level, and communication runs over industrial protocols such as DNP3, Modbus, or IEC 60870-5-104. Characteristic features are geographic distribution across wide-area links and component lifetimes of two decades or more.

Practical security relevance

Two properties shape the security picture: availability and process safety outrank confidentiality, and many protocols were designed without authentication. Historically this was offset by physical separation, which disappears with remote maintenance and IT connectivity. Effective measures are rigorous network segmentationNetwork SegmentationSeparates network segments to control access and limit lateral movement., protocol inspection at zone boundaries, a maintained inventory of all field devices, and enabling the authentication mechanisms the devices do support.

Related concepts

• Operational TechnologyOperational TechnologyHardware and software used to monitor or control physical equipment, machinery, and industrial processes.: Hardware and software used to monitor or control physical equipment, machinery, and industrial processes.
• Operational Technology SecurityOperational Technology SecurityProtects industrial control, production, and process control systems.: Protects industrial control, production, and process control systems.
• Network SegmentationNetwork SegmentationSeparates network segments to control access and limit lateral movement.: Separates network segments to control access and limit lateral movement.
• OT Penetration TestingOT Penetration TestingAuthorized security testing of industrial control systems, SCADA networks, and operational technology environments to find exploitable weaknesses without disrupting physical processes.: Authorized security testing of industrial control systems, SCADA networks, and operational technology environments to find exploitable weaknesses without disrupting physical processes.