Industrial Reliability & Cybersecurity Dashboard | Craft Automation

CRAFT AUTOMATION

Industrial Technology Solutions

Facility Resilience Simulator

This interactive dashboard translates the principles of the Purdue Model and ISA/IEC 62443 into actionable insights. Adjust the architectural parameters below to see how your decisions impact operational readiness, risk distribution, and potential recovery times in real-time. A secure plant is a reliable plant.

PURDUE LEVEL 3.5: INDUSTRIAL DEMILITARIZED ZONE (IDMZ)

The Security Air-lock (IDMZ)

Does the facility utilize a dedicated Industrial DMZ to terminate office-to-plant traffic before it hits the factory floor?

Converged / Flat Network CRITICAL: Ransomware affects supervisory controls.

Segmented IDMZ Barrier SECURE: The 'Air-lock' filters traffic.

PURDUE LEVEL 3: EXTERNAL ACCESS

The Front Door - Virtual Private Network(VPN) / Multi-Factor Authentication (MFA)

When vendors support you remotely, do they use an authenticated gateway or open ports?

Port Forwarding (No Guard) CRITICAL: Botnets find open doors in seconds.

Secure Gateway (VPN) SECURE: Vendors must prove identity.

PURDUE LEVEL 2: SUPERVISORY ZONING

Internal Fire Doors (Segmentation)

Is your production network segmented into isolated machine zones (VLANs) to prevent lateral spread?

Single Broadcast Domain HIGH RISK: One hit takes down the whole plant.

Zoned Micro-Segmentation SECURE: Threats are trapped in a single cell.

Intrustion Detection System (IDS) Monitoring (Network Cameras)

Are you using an IDS to watch for unauthorized command injections?

Zero Visibility HIGH RISK: Blind until machines stop moving.

Active OT Logging SECURE: Alerts trigger on suspicious patterns.

PURDUE LEVEL 1: CONTROL HARDENING

Equipment & Panel Locks

Are your physical cabinets keyed and your individual PLC/HMI ports restricted?

Open Panels & Defaults HIGH RISK: 'Plug-and-Play' sabotage is possible.

Hardened Asset Config SECURE: Locked doors and unique credentials.

The Key Registry (Access Control)

Does every person have their own login (RBAC), or does everyone share a single 'Admin' password?

Shared Master Credentials HIGH RISK: Zero accountability for logic changes.

Strict Identity Mgmt SECURE: Every change is logged to a user.

OTHER CONTRIBUTING FACTORS

MAINTENANCE: VULNERABILITY MGMT

Firmware Lifecycle (Patching)

Do you have a plan to apply security patches to fix known holes in your automation software?

Reactive / No Patching CRITICAL: Running known public exploits.

Managed Update Cycle SECURE: Proactively plugging system holes.

RESILIENCE: RECOVERY TIME

The Spare Tire Strategy (Backups)

If a PLC fails today, do you have a current logic backup ready to restore?

No Validated Backups CRITICAL: Results in massive, expensive downtime.

Automated Backups SECURE: Minimal Recovery Time Objective (RTO); hardware replaced in minutes.

LIFECYCLE: ASSET MODERNIZATION

Retiring "Rusty" Technology

Are you running unsupported Legacy OS (Windows XP/7) that can no longer be patched?

Legacy Systems Present CRITICAL: Permanent holes in your defensive wall.

Modernized Tech Stack SECURE: All systems are within vendor support.

Real-Time Reliability Metrics

Visualizing the operational readiness and architectural risk profile based on current selections.

Overall Readiness

Security Posture by Layer

Purdue Model Architecture Map

Dynamic representation of physical & logical boundaries.

= Potential Threat

IDS: ACTIVE

BACKUPS: SECURED

Corporate Office

Public Internet

Ransomware

Botnet Scan

Lateral Movement

Level 3.5: Industrial DMZ

Level 2: Supervisory Zones

Level 1: Control Assets

🖥️ SCADA

⚙️ PLC / I/O

Remediation Action Plan

Disclaimer: This Industrial Cybersecurity Audit tool is for educational and estimation purposes only. Cybersecurity threats are constantly evolving; this assessment provides a baseline estimate based on ISA/IEC 62443 and Purdue Model principles but does not replace a comprehensive, professional site security audit by Craft Automation.