Written by Chance Belcher
Critical Infrastructure Systems depend on network-controlled environments. This leads to
many weaknesses, which the implementation of SCADA Systems will address. Issues such as
insecure RTUs and PLCs, as well as malware infections and host system compromise, are all
solved with SCADA.

Critical Infrastructures Vulnerabilities
Modern critical infrastructure systems typically use IP-based networks and WAN
connections. While this does make operations streamlined and allows for easier access for
employees, it also comes with its own list of issues. Having the network on a WAN, or any
IP-based network, creates opportunities for threat vectors to remotely attack our systems. Older
generations of critical infrastructure systems utilize proprietary protocols that have limited
security; even newer systems tend to still use protocols that lack strong authentication or
encryption. Finally, RTUs (remote terminal units) and PLCs (programmable logic controller)
often allow commands without rigorous validation. If someone gains network access through
these means, they will be able to tamper with real-world equipment such as pumps, valves, etc.

How SCADA Applications help Mitigate these Risks
SCADA applications play an essential role in safeguarding critical processes and
improving employee resilience by providing better tools that improve visibility and control.
SCADA provides centralized monitoring and real-time awareness. It consolidates data from
RTUs or PLCs, providing employees with alarms, status updates, and historical logs, which can
be used to secure the network. Early detection of abnormal activity can help us prevent any
breaches in the future. Even though RTUs/PLCs perform most actions automatically, SCADA
allows us to have operators who can override unsafe conditions, adjust setpoints, and respond
swiftly to unexpected events. SCADA systems also often include dual-redundant or hot-standby
servers. If primary functions go down, whether due to a threat vector or malfunction, a backup
server is in place to keep operations running.

Summary
In conclusion, vulnerabilities within critical infrastructure systems mainly derive from
connectivity, weak/legacy protocols, insecure field devices, and malware/unauthorized access.
SCADA applications mitigate risks by centralizing monitoring capabilities, providing
supervisory control, triggering alarms, and integrating security controls like VPNs and
whitelisting. We should implement SCADA systems in our company.

Works Cited
IEEE. (2025). Cybersecurity of critical infrastructure with ICS/SCADA systems. IEEE Public Safety
Technology.
https://publicsafety.ieee.org/topics/cybersecurity-of-critical-infrastructure-with-ics-scada-systems
/
SCADA Systems. (n.d.). SCADA systems. http://www.scadasystems.net