Welcome Guest! The IOSH forums are a free resource to both members and non-members. Login or register to use them

Postings made by forum users are personal opinions. IOSH is not responsible for the content or accuracy of any of the information contained in forum postings. Please carefully consider any advice you receive.

Notification

Icon
Error

Options
Go to last post Go to first unread
Tonyjoe  
#1 Posted : 01 May 2019 15:30:56(UTC)
Rank: New forum user
Tonyjoe

we are installing more & more machinery which can be accessed remotely by engineers to fault find & problem solve.

we have very good firewalls & safeguards to prevent external attach via the internet,

Im looking to put a SSOW in place for our machine operators to use - what to be aware of when someone remotely access their machine; protoacols to establish with the engineers; how to check after work is complete what has been done & if the machines are still safe to operate & run.

It sound staright forward, but I dont want to overcomplicate this. More often the engineers are based in the country we bough the machine from - Europe, or Asia, our operators need to communicate with them so  language becomes a problem.

Anyone got any advice?

paul.skyrme  
#2 Posted : 02 May 2019 11:49:06(UTC)
Rank: Super forum user
paul.skyrme

Are these CE marked machines?

If so this remote control aspect must have been addressed in the EHSR's, thus must be documented, and it would be difficult to justify deviation from the recognised harmonised standard for this procedure.

I can help more if you want, please PM.

A Kurdziel  
#3 Posted : 02 May 2019 12:54:11(UTC)
Rank: Super forum user
A Kurdziel

This could well be an issue for the future with the establishment of the ‘Internet of Things’, which means that you will be able to have manufacturing plant based in one country (one let’s say with low labour costs eg India, Vietnam, post Brexit UK) but controlled entirely from another. What rules do you apply, the higher standards or the cheaper ones?

stevedm  
#4 Posted : 04 May 2019 06:00:58(UTC)
Rank: Super forum user
stevedm

Having completed this for a number of oil and gas projects worldwide...and remote operation of 26 high hazard sites from one little room in UK...and even then we stil have a technician on the phone being directed by a supplier in another country..

Just bear in mind it isn't 'normal' IT security you are talking about here it is Industrial Control System Security and like process safety a dicipline all of its own...so the architecture of the system is important...

One of the best guides is a US document NIST SP-800-82...this gives a concise overview of the all of the relevant standards internationally that apply to SCDA, DCS and PLC...along wth some guidance on the processes and procedures to be applied...there will be a security risk assessment somewhere as part of the project implementation files, I'm sure, so you will need to get hold of that too to ensure you have all the information...this shouldn't affect the basic machinery safety architecture (ISO13849-1) but has an input to it, I am sure the engineering guys have that covered?  

I hope this helps...let me know how you get on..  :)

stevedm  
#5 Posted : 04 May 2019 06:13:15(UTC)
Rank: Super forum user
stevedm

Users browsing this topic
Guest (2)
You cannot post new topics in this forum.
You cannot reply to topics in this forum.
You cannot delete your posts in this forum.
You cannot edit your posts in this forum.
You cannot create polls in this forum.
You cannot vote in polls in this forum.