Advantages And Disadvantages Of SCADA

The upgrade project consisted of the design & construction of a new Programmable Logic Controller (PLC) and Supervisory Control And Data Acquisition (SCADA) system to eventually replace the existing legacy Honeywell/Experion system and equipment which is nearing the end of its life cycle. The new chemical sludge handling PLC, incorporates hot standby Siemens S7400H processors utilising a Media Redundancy Protocol (MRP) remote Input/Output (RIO) network allowing simultaneous PLC and network failure without process interruption.

| “Security controls are the management, operational, and technical safeguards or countermeasures employed within an organizational information system to protect the confidentiality, integrity, and availability of the system and its information” (NIST SP 800, 2009). The control allows the organization to efficiently mitigate the risk coming from the use of information System (IS) to conduct business operations and processes.

CE 1.3.2 Also I had stated to Coordination with different machine vendors for data required for software configuration like set points, speed, frequencies, logics etc., so that I would be ready with all the required information and pass to vendor for preparation of the database.

p. 10). Other controls include: Asset Classification and Control maintains an appropriate level of protection for all critical or sensitive assets. Communications and Operations Management reduces the risk of failure and its consequences by ensuring the proper and secure use of information processing facilities and by developing incident response procedures. Systems Development and Maintenance prevents the loss, modification, or misuse of information in operating systems and application software. Business Continuity Management develops the organization’s capacity to react rapidly to the interruption of critical activities resulting from failures, incidents, natural disasters, or catastrophes. Compliance ensures that all laws and regulations

if an attacker manages to enter the SCADA network, it will be difficult to carry out any sort of attack. The monitoring

Workstation: A workstation is an area accessed by a user. There are many different types of workstations, but the network workstation makes sure that they are connected to an office LAN so they can access other workstations if needed. It can be used for any job, such as gaming designer, video editing, architect ect. The network workstation allows people to share their files to any other workstation as long as they are connected on the LAN.

used to initiate communication. It also explains some support functions used to set values in

It demonstrates the workflow behaviour of a system which describes the state of activities by showing the sequence of activities performed in different order. The diagram has branches and forks to describe conditions and parallel activities.

fault resiliency are critical. CISCO system ASA 5510, on the other side, is used for remote

The OIG 2011 FISAM Assessment indicates that “FISMA Section 3544 requires establishing policies and procedures to ensure information security is addressed throughout the life cycle of each agency information system” (VA Office of Inspector General, 2012, p. 9). Based on the lack of consistency in use of SDLC and change control, major security risks may go unnoticed.

The conceptual framework for the deployed system is given bellow. The framework contains one Coordinator which is connected to the control station computer through USB cable, four routers and three sensor devices. Data packets from the sensor device are transmitted to the coordinator via multi-hop routing.

Supervisory Control and Data Acquisition System Network systems (SCADA), Distributed Control System (DCS) and Industrial Control Systems (ICS) are examples of controlling their Critical Infrastructure. Because once the hackers are able to gain access to the SCADA Network system and sabotage the system, then the Critical Infrastructure would lead to cyberwar and chaos.

SSC provides information technology (IT) services and consulting, including developmental solutions, IT integration, system analysis, design, and implementation. SSC will has submitted a proposal to KFF that details the development processes for the FSP project. This paper is a technical specification that lists the project’s logical and physical models, including hardware, network, software, database, controls, and other development related requirements.

Ozturk and Aubin (2011) mention there are several security vulnerabilities associated with SCADA such as the networking of control systems where breaches in enterprise security can arise if appropriate security controls are not put in place for both networks. Insecure remote connections,

The interview session has been done by include an open-ended and closed-ended question which are related to the implemented project. Next, sampling technique is executed by system analyst who does evaluation to the current system or prototype. These processes give feedback in evaluation form that filled after tested the system. Lastly, observation is performed by using questionnaire form. According to Burch (1992), the questionnaire is analyzed and transform into structured form that easy to understand. After all information has been collected, structuring of system requirement takes place. It focused on development process modeling which perform “graphically representing the process, or actions, that capture, manipulate, store, and distribute data between a system and environment” (Hoffer, George, & Valacich, 2012, p. 182). In this step, Data flow diagram (DFD) is structured by system analyst using special tools and techniques to create a decision table. According to Hoffer, George and Valacich (2012), decision table is a “diagram of process logic where the logic is reasonably complicated” (p. 200). This table is useful to help system analyst to make a decision toward the project. Then all information’s gained from this phase are documented in System Analysis Report (SAR) that acts as a guideline or reference to the future system development project (Burch, 1992).