Risks Associated with SCADA Systems and Critical Infrastructures
SCADA stands for Supervisory Control and Data Acquisition, which is an industrial control system meant for monitoring and controlling industrial operations and critical infrastructure. Unlike typical information technology systems where the focus is on processing and storing information in the form of digits, SCADA systems interface with physical equipment and processes. In the assigned article, it is pointed out that SCADA can control processes such as infrastructure processes involving water treatment and gas pipelines, facility-based processes such as airports, and industrial processes such as manufacturing and power generation (SCADA Systems, n.d.). SCADA systems enable organizations to gather information from the equipment, monitor operations, and adjust when required. Due to the nature of SCADA systems, cybersecurity issues can impact both information and physical operations.
Role and Function of SCADA Systems
The SCADA system is made up of various components that help the process of monitoring and controlling operations in industry. According to the given article, the key components are Remote Terminal Units (RTUs), Programmable Logic Controllers (PLCs), supervisory systems, Human Machine Interfaces (HMIs), and the communication network (SCADA Systems, n.d.). The RTUs are connected to the equipment and are used to transfer the signals from the sensors to the computer by digitizing them, whereas the PLCs undertake the function of controlling the processes. The HMIs are used to give the human operators the processed data enabling them to view the equipment and make control decisions. For instance, an operator can use the HMI to view the pump and see how much fluid flows through it before he turns the pump off.
SCADA Systems in Critical Infrastructure
The relevance of SCADA systems is justified by the fact that most operations in critical infrastructure include equipment spread out over wide geographic locations. SCADA systems can monitor electrical transmission, substations, pipelines, and power generation equipment for energy companies. Water utilities can use the SCADA system to monitor pumps, pressure, flow rates, and treatment processes, while the transportation system can monitor the railways and traffic infrastructure. SCADA systems can also be used in manufacturing plants for controlling machinery and production processes. It is indicated in the assigned article that SCADA systems monitor and control the “distribution of water, traffic lights, electricity transmissions, gas transportation and oil pipelines” (SCADA Systems, n.d., para. 75). Thus, it becomes clear that SCADA systems are associated with services utilized by people daily.
Cybersecurity Vulnerabilities and Risks
An example of a threat in the field of cyber security includes the increasing interconnectedness of today’s SCADA systems. Earlier SCADA systems were independent and had their own proprietary communications systems, making it less likely that they would be exposed to any outside networks. The current generation of SCADA systems uses Internet Protocol (IP) networking, Ethernet, remote access, and many other networking techniques. As stated in the given article, “due to the use of networked SCADA, the vulnerability of the system is increased,” (SCADA Systems, n.d., para. 61). Unauthorized access also constitutes another key vulnerability where attackers may be able to access credentials, install malware, use remote connections, and access network segments which are poorly protected. As per the article that has been assigned, there are two major risks involved which include unauthorized access to control software and unauthorized access to packets on network segments which have SCADA devices (SCADA Systems, n.d.). In this regard, it is important to understand that just because the SCADA networks are physically secure or not connected to the Internet, they cannot be assumed to be secured.
Impact of Cyberattacks on SCADA Systems
A cyber-attack on a SCADA system will not only impact the business but the whole infrastructure and society around it as well. Because SCADA systems operate using physical devices, the hacker can manipulate the command, disrupt communication, or stop the devices from working properly. An attack on electrical systems might lead to stopping power flow while an attack on the transportation infrastructure will disrupt its operations. In the same way, attacks on water or manufacturing systems may disrupt treatment process, production activities or even damage equipment. According to the assigned article, the security aspect is of extreme importance because any destruction of the SCADA controlled system can have devastating results (SCADA Systems, n.d.).
Security and Resilience Strategies
The protection of SCADA systems must be done using a defense-in-depth approach whereby several security measures are utilized rather than depending on a single approach. Network segregation will help in isolating the operational technology network from the normal IT networks so that the attacker will have more difficulty moving from one system to another. Other protective measures include limiting the remote access, having a robust authentication process, changing default passwords, monitoring network activities, keeping backups, and developing incident response plans. In particular, the assigned article highlights industrial virtual private networks, firewalls, and application whitelisting (SCADA Systems, n.d.).
Additionally, organizations need to find a balance between the cybersecurity needs of their organization and the reliability and availability aspects of the industrial system. According to NIST, OT security should address “the unique performance, reliability, and safety requirements for systems that interface with the physical world” (Stouffer et al., 2023). Thus, besides installing cybersecurity tools, it is crucial to use additional means to ensure security. Organizations can employ technical solutions, along with conducting risk assessments, providing training, implementing access control policies, and monitoring the system.
Conclusion
In various industries including those of energy, water, transportation, and manufacturing, SCADA systems offer vital monitoring and control capabilities for critical infrastructure. Nevertheless, the connection between the SCADA systems and the physical devices, together with the greater level of network connectivity, present substantial cybersecurity threats. The access without authorization, together with network vulnerabilities, will allow the attackers to breach not only the computerized information but also to have an impact on the real-world operation of the SCADA system. Organizational efforts can be directed at minimizing the threats through such methods as network segregation, authentication, monitoring, access restriction, security system, backups, and incidents response.
 
References
SCADA systems. (n.d.). Tech-FAQ. http://www.tech-faq.com/scada.html
Stouffer, K., Pease, M., Tang, C., Zimmerman, T., Pillitteri, V., Lightman, S., Hahn, A., Saravia, S., Sherule, A., & Thompson, M. (2023). Guide to operational technology (OT) security (NIST Special Publication 800-82 Rev. 3). National Institute of Standards and Technology. https://doi.org/10.6028/NIST.SP.800-82r3