Cybersecurity
SCADA Security
Hardening the supervisory layer.
Written guides in this section
Full references, procedures, and diagnostic guides published under SCADA Security.
Server Hardening
Reducing what an attacker can do with a SCADA server: a baseline from the vendor guide and a benchmark, unused services removed, the host firewall on, application allowlisting, controlled media, separate administrator accounts, and logs sent off the box.
10 min readUpdated Sep 5, 2026
User Accounts and Roles
Who can do what on the SCADA and how it is enforced: roles from view-only to administrator and their permission matrix, individual accounts including the operator console, service and vendor accounts, same-day offboarding, and the quarterly review.
9 min readUpdated Sep 5, 2026
Patch Management
Applying updates to SCADA servers and clients without breaking the plant: vendor qualification, a monthly cycle with a test system, priority from the exposed edge inward, backups and rollback, emergency patches, and handling software that cannot be patched.
9 min readUpdated Sep 5, 2026
Historian Security
The historian is the most connected server in a control system and the most exposed: giving the office, reports, and the cloud the data they need without a path to the plant, with a collector in the control zone, a replica in the DMZ, and one-way flow.
9 min readUpdated Sep 5, 2026
Third-Party Software
Everything on a control system machine that is not the SCADA: drivers, databases, runtimes, reporting tools, agents, remote support utilities. Why each is an attack surface, the inventory and approved list, rules for installs, and removing what is unused.
8 min readUpdated Sep 5, 2026
Topics in this area
Server Hardening
Server Hardening — practical reference notes for controls engineers, integrators, and technicians working with scada security.
User Accounts And Roles
User Accounts And Roles — practical reference notes for controls engineers, integrators, and technicians working with scada security.
Patch Management
Patch Management — practical reference notes for controls engineers, integrators, and technicians working with scada security.
Historian Security
Historian Security — practical reference notes for controls engineers, integrators, and technicians working with scada security.
Third Party Software
Third Party Software — practical reference notes for controls engineers, integrators, and technicians working with scada security.
Direct contact
Have a controls question?
Reach Eric Sullivan directly about anything on this site, a controls or automation topic, or one of his personal projects.
References to manufacturers, products, model numbers, software platforms, technical specifications, companies, standards organizations, or other organizations are provided for informational purposes and do not imply sponsorship, endorsement, authorization, or affiliation unless expressly stated. Manufacturer specifications must be independently verified against current manufacturer documentation.