Implementation of a role-based PI security concept

The assignment included the implementation of role-based access to the PI system while at the same time replacing the PI Trusts as far as possible. Special challenges were the strict requirements for data integrity and the requirement that operations must continue without interruption during the project, as the production facility is a 24/7 operation in a GMP environment. The mandate included:

• Avoidance of data loss

• Implementation of the roles: Administrator and User

• IOQ test for the completion of the customer-internal change request (GMP change management)

• Creation of concept documentation, FS, SDS and test plan

The project phases involved recording the current status and a comprehensive analysis of the PI system. This included the documentation of the PI interfaces used, the service user, the structure of the infrastructure and the relationships between the components. Thanks to the customer's advance preparation, we were able to focus on the migration procedure.

Once the documents had been approved, the role-based PI security concept was implemented and the existing PI trusts were gradually deactivated. The final GMP-relevant IOQ test and handover marked the successful completion of the project.

The biggest challenge of the project was the requirement that no data should be lost during implementation. This challenge was successfully overcome by using OPC-DA for data transfers to the PI buffer and the use of PI interfaces for secure data transfer from a data buffer (SQL-DB or OPC-AE). Thanks to our experience with PI systems, we were able to successfully implement a role-based PI security concept for our customer and thus create the basis for further exciting projects.