Operational technology
See the plant without touching it
Condition visibility for engineers and executives, delivered across a one-way boundary. This sandbox is read-only by design — there is no command path, and every value is simulated. This role is mapped to the whole fleet.
This is not plant data
Values below are generated for the demonstration and drift only when you press refresh. No screen in this application can issue a setpoint, trip a unit or write to a control system.
Condition sandbox
Illustrative signals from a one-way tap
watch
274.6ft
Lake level
Below the five-year operating band
normal
3.1mm/s
Unit 4 vibration
Within ISO 10816 zone B
normal
0.4mm drift
Guide vane servo
No action
Akosombo · Hydro · Zone 3 — plant control (simulated tap)sample 001
The boundary
Zones from the control system to the boardroom
- Zone 5Enterprise / cloudFabric, Copilot Studio agents, Power BI, executive screensRead only, outbound
- Zone 3.5Industrial demilitarised zonePassive data diode / broker, certificate boundary, protocol breakOne-way replication
- Zone 3Plant operationsDCS, SCADA, historians, condition monitoring serversNo inbound path from the platform
- Zone 0–2Control and safetyPLCs, protection relays, governors, safety instrumented systemsNever addressed by this platform
Design rules carried into any pilot
- No command, setpoint or write path exists from any screen in this demonstration to a plant.
- Telemetry is replicated one way through a broker; the analytics estate cannot reach back into the plant network.
- Every value shown is generated for the demonstration and must not be read as plant condition.
- A production design needs a joint IT/OT security assessment, vendor approval and change control before any tap is installed.
Test the boundary
Try to read, write and trip against the selected site
Run each request yourself. Every attempt is recorded in the audit trail, whether it is permitted or refused.
0 permitted this session·0 refused this session