PI System - OT Network
CTE built the IT/OT infrastructure for the local PI system in compliance with Syngenta's security requirements and integrated it securely into the existing network. CTE also implemented the local AVEVA PI system and provided the connection to the process control system for archiving the process data.
Mandate
The storage and use of process data at the Kaisten plant needed to be modernized. A system was needed to reliably record and archive process data over a period of 10 years or longer and make it available to various stakeholders across the Group. At the same time, the entire IT/OT infrastructure was to be set up and integrated into the existing Syngenta infrastructure. The assignment included:
Setting up the IT/OT infrastructure (virtualization) incl. firewalls and layer system
Integration into the existing Syngenta network
Secure external access in compliance with Syngenta's cyber security guidelines
Implementation of the AVEVA PI system
Connection of the process control system
Preparation for synchronizing data from the local PI system to the "global" PI system L4 in the cloud
Procedure
Based on the requirements of the plant operator and the users as well as the overarching cyber security specifications, a concept was developed in close cooperation with the customer that can also be used at other Syngenta sites.
Virtualization was set up for the IT/OT infrastructure, which hosts all the required applications and services. In addition, a system monitoring system was set up to monitor the health of all infrastructure components and applications and send automated messages in the event of anomalies. A backup and disaster recovery system was implemented, which backs up all VMs and data and can quickly restore the systems in the event of a disaster. The data is also stored on storage protected against encryption attacks.
A highly available industrial network was set up, which has several security layers and zones. These are separated by firewalls and implemented according to a security concept specified by the customer.
The AVEVA PI system, which is already in use at Syngenta and is the industry standard in the pharmaceutical and biotech sectors, was chosen for Data Historian . The system was implemented in accordance with AVEVA standard specifications and was implemented without any problems thanks to the many years of experience and expertise of the CTE employees. The connection of the process control system also went smoothly thanks to the excellent cooperation with the responsible system integrator.
Achievements
All components were implemented as planned in the concept. Thanks to the good cooperation both internally within the CTE project team and externally with the responsible parties, problems were solved quickly and easily. The project was completed without any major delays and within the planned budget.
Following the commissioning of the system, further measuring points of the process control system have already been implemented. Thanks to the modular structure, measurement data from a new gas warning system could be integrated into the system during operation.
The system was checked for security by an external company and a comprehensive penetration test was carried out. The external company confirmed that all specifications were implemented in full and that the system is adequately secured by CTE.
CTE continues to support the entire system (infrastructure and PI application), including regular maintenance work, system updates and extensions as required.
Project Phases
Find out more about our development process.
