Seeking info on SCADA Water Systems

greenspun.com : LUSENET : TimeBomb 2000 (Y2000) : One Thread

I got a package in the mail Friday from the water company after I called to ask them about Y2K. From the analysis they sent me it seems the water company upgraded in 1996. SCADA that is "compliant." I'm going to contact them with follow ups since they seemed to imply because they upgraded in 1996, they didn't expect any problems. They didn't mention they'd tested. Has anyone got any word on what companies supply chips for SCADA water systems?

-- Other Lisa (LisaWard2@aol.com), January 30, 1999

Answers

SCADA systems are built by a number of systems integration companies. The Y2K vulnerability of any system depends on what components these integration contractors choose to use. The software used in the SCADA system and any custom software written for each individual SCADA system are affect Y2K vulnerability.

The only way to do a good "table-top evaluation" is to have the manufacturer identification and model numbers of all the embedded systems, computers, remote sensors, etc and check them against lists of tested, Y2K-ready models. If there is no info on a particular piece of equipment, then it's time to start checking the chip part numbers used in that piece of equipment for being listed as Y2K- ready. Spot-checks of selected devices are a good "honesty check" when doing a table-top eval.

Same type of process applies to software. If the computers are running Y2K-ready operating systems, then only the applications software has to be evaluated, sometimes line by line.

Since they claim compliance, ask for a copy of their compliance testing criteria, detailed testing results and certification of the outside testing agency or firm who did the testing.

WW

-- Wildweasel (vtmldm@epix.net), January 30, 1999.


Lisa, see the thread at Rick Cowles site: http://www.greenspun.com/bboard/q-and-a-fetch-msg.tcl?msg_id=000Req

Apparently SCADA is not now compliant, sophia

-- sophia compton (scompton@athenians.com), January 30, 1999.


Thanks for the info WW and Sophia. Will be writing my questions today to present to the Chief Engineer and IS Manager of the Water Company. I'm concerned about forthrightedness on the part of the Water Company. (Not accusing them of being deceptive mind you, yet). But I think I will CC: to some of the media outlets. Again, I appreciate you help.

-- Other Lisa (LisaWard2@aol.com), January 31, 1999.

Also - WW and others - a full up integrated test is needed after inventory is complete. Most instrument companies I've reached indicate the sensor itself is okay, but many have a problem in the routines inside the "mother" program they report to back in the main control area.

That is, the main computer needs to be certified at the same time the reporting embedded chips are tested.

-- Robert A. Cook, PE (Kennesaw, GA) (cook.r@csaatl.com), January 31, 1999.


Moderation questions? read the FAQ