It's tough. People who know what theyre doing want an air gap, but:
1. Suits really want access to information about the process right fucking now so you need at least a dmz at your head office, and
2. Municipal water systems tend to be spread out over miles and miles and so to get connectivity for example to a lift station you need all kinds of infrastructure to connect between everything or you use a public internet connection at a fraction of the price.
Municipal water budgets, in spite of how crazy expensive municipal water is, don't tend to be that high and so if they can save some money by doing things the easier way they will.
Of course, that doesn't mean that everyone needs to throw their plcs directly on the public internet. At the very least, there's absolutely no reason why those remote sites can't be connecting back to the main plant network using vpns that are at least several orders of magnitude more secure than the systems they'd be protecting.
1. Suits really want access to information about the process right fucking now so you need at least a dmz at your head office, and
2. Municipal water systems tend to be spread out over miles and miles and so to get connectivity for example to a lift station you need all kinds of infrastructure to connect between everything or you use a public internet connection at a fraction of the price.
Municipal water budgets, in spite of how crazy expensive municipal water is, don't tend to be that high and so if they can save some money by doing things the easier way they will.
Of course, that doesn't mean that everyone needs to throw their plcs directly on the public internet. At the very least, there's absolutely no reason why those remote sites can't be connecting back to the main plant network using vpns that are at least several orders of magnitude more secure than the systems they'd be protecting.
- replies
- 2
- announces
- 0
- likes
- 2