Why These Terms Matter

SCADA (Supervisory Control and Data Acquisition) and the broader field of industrial control systems (ICS) sit at the intersection of electrical engineering, computer networking, and process control — and each of those fields brings its own vocabulary. An engineer moving from a pure IT background into operational technology (OT) will hit unfamiliar terms like "RTU," "scan cycle," or "Purdue Model" on day one; a process engineer moving into automation will hit unfamiliar networking terms like "deterministic," "polling," and "gateway."

Getting these terms right is not academic. A specification that confuses a PLC with an RTU, or a historian with a data concentrator, can lead to the wrong equipment being purchased, the wrong cybersecurity zone being applied, or a control narrative that a commissioning technician cannot actually implement. This glossary defines 55 of the most important SCADA and ICS terms in plain language, organized alphabetically, with references to the relevant standards (IEC 61131, IEC 62443, ISA-95, ISA-18.2, IEEE, and NIST) where applicable.

A

Alarm Rationalization — ISA-18.2 / IEC 62682
The structured process of reviewing every configured alarm against a documented rationale — cause, consequence, corrective action, and time to respond — to eliminate nuisance and duplicate alarms. Plants that skip rationalization commonly suffer "alarm floods," where an upset triggers hundreds of alarms per minute and operators cannot identify the root cause. ISA-18.2 recommends no more than roughly 1 alarm per 10 minutes per operator console during steady-state operation.
Analog Input/Output (AI/AO)
An I/O channel that reads or writes a continuously variable value — such as 4–20 mA current loops or 0–10 VDC signals — rather than a simple on/off state. Analog inputs typically represent process variables like temperature, pressure, level, or flow after signal conditioning; analog outputs drive final control elements like control valve positioners or VFD speed references.
ASDU (Application Service Data Unit) — IEC 60870-5
The payload structure of an IEC 60870-101/104 telecontrol message, used widely in electric utility SCADA (especially outside North America) to carry measured values, commands, and time-tagged events between a master station and substation RTUs.

B

Backplane
The physical bus inside a PLC chassis or rack that carries power and communication between the CPU/processor module and the I/O modules plugged into the rack. Backplane power budget and backplane communication throughput are both common sizing constraints when adding I/O modules to an existing rack.
Bumpless Transfer
The ability to switch a control loop between manual and automatic mode (or between a primary and backup controller) without a step change in the output signal to the final control element. Bumpless transfer prevents a sudden valve or VFD speed jump that could upset the process or damage equipment during a mode change or failover.

C

CIP (Common Industrial Protocol)
An object-oriented application-layer protocol used by EtherNet/IP, DeviceNet, and ControlNet to exchange data between controllers, I/O, and devices. CIP defines a common object model so that a single message structure works across multiple physical networks — EtherNet/IP is simply CIP running over standard Ethernet/TCP-IP/UDP.
Control Narrative
A plain-language document describing exactly how a process or piece of equipment should be controlled — startup sequence, interlocks, alarm setpoints, normal operating ranges, and shutdown logic — written before PLC/DCS programming begins. The control narrative is the bridge between the process engineer's intent and the programmer's ladder logic or function block diagram, and it is the primary reference used during factory acceptance testing (FAT).
Cybersecurity Zone / Conduit — IEC 62443
A "zone" is a grouping of assets that share common security requirements (e.g., all Level 1 controllers on a single production line); a "conduit" is the communication path connecting zones, where security controls like firewalls and unidirectional gateways are applied. IEC 62443-3-2 defines the zone-and-conduit model as the foundation for ICS security architecture and risk assessment.

D

DCS (Distributed Control System)
A control architecture, traditionally used in continuous process industries (refining, power generation, chemical), where control processing is distributed across many controllers tightly integrated with a proprietary or semi-proprietary engineering and operator environment from a single vendor. Historically, DCS emphasized dense, tightly-scanned continuous control loops within one facility, while SCADA emphasized supervisory monitoring of geographically dispersed assets — though modern platforms increasingly blur this line.
Deadband
The range around a setpoint within which a controller will not initiate a change of output, used to prevent excessive valve or relay cycling ("hunting") from small, insignificant process fluctuations or sensor noise.
Deterministic (Communication)
A network or protocol characteristic where the maximum time to deliver a message is guaranteed and bounded, regardless of other traffic on the network. Safety-related and closed-loop control communications typically require deterministic behavior; standard Ethernet/TCP-IP is not inherently deterministic unless protocol extensions (like EtherCAT, PROFINET IRT, or time-sensitive networking/TSN) are used.
DNP3 (Distributed Network Protocol 3) — IEEE 1815
An open communication protocol widely used in electric, water, and wastewater utility SCADA, particularly in North America, designed for reliable data exchange over unreliable media (radio, leased lines) with built-in time-stamping, unsolicited reporting, and Secure Authentication (DNP3-SA) extensions for cybersecurity.
Dual-Homed / Redundant Network
A network architecture in which critical SCADA servers, HMI clients, or controllers have two independent network interfaces/paths so that a single cable, switch, or NIC failure does not interrupt monitoring or control. Ring topologies with protocols like Rapid Spanning Tree (RSTP) or Media Redundancy Protocol (MRP) are common ways to implement network-level redundancy.

E

Edge Device / Edge Gateway
A device installed at or near the point of data collection that performs local processing, protocol translation, or data buffering before forwarding information upstream — for example, translating Modbus RTU field data to MQTT for cloud reporting. Edge devices reduce bandwidth needs and allow local logic to continue functioning during a loss of upstream connectivity.
EtherNet/IP
An industrial Ethernet protocol that implements CIP over standard Ethernet, widely used by Rockwell Automation (Allen-Bradley) and many other vendors for controller-to-I/O and controller-to-controller communication on the plant floor.
Event-Driven vs. Polled Data
Event-driven ("report by exception") reporting means a field device only sends data when a value changes beyond a deadband or a digital state changes, conserving bandwidth on low-speed links like radio or satellite. Polled reporting means the master station actively requests data from each remote on a fixed schedule (the "scan"), which is simpler but uses more bandwidth and introduces latency proportional to the polling interval.

F

Fail-Safe / Fail-Closed / Fail-Open
Describes the state a final control element (valve, damper, contactor) assumes on loss of power, air, or control signal. "Fail-closed" valves shut on loss of signal (common for fuel or hazardous chemical service); "fail-open" valves open on loss of signal (common for cooling water or vents). Selecting the correct fail-safe state is a core safety design decision, not just a component spec.
Fieldbus
A family of industrial digital communication networks (Foundation Fieldbus, PROFIBUS, HART, DeviceNet) that connect field instruments and actuators to controllers using a single multi-drop cable instead of individual point-to-point analog wiring, reducing cabling cost and enabling richer diagnostic data than a simple 4–20 mA signal.
Function Block Diagram (FBD) — IEC 61131-3
One of the five standardized PLC programming languages, representing control logic as interconnected graphical blocks (each performing a function like AND, PID, or timer) with signal flow shown by connecting lines — commonly used for continuous process control logic as an alternative to ladder logic.

G

Gateway (Protocol Gateway)
A device or software module that translates data between two different industrial protocols — for example, Modbus RTU to Ethernet/IP, or DNP3 to IEC 61850 — allowing legacy field devices to communicate with a newer SCADA master or vice versa without replacing existing equipment.
Ground Fault Detection (Ungrounded Systems)
In many industrial control power systems that use ungrounded or high-resistance-grounded distribution to maximize uptime, a dedicated ground fault detection relay monitors for the first fault so it can be located and cleared before a second fault causes a phase-to-phase short and a process trip.

H

HART (Highway Addressable Remote Transducer)
A hybrid communication protocol that superimposes a digital signal on top of the standard 4–20 mA analog current loop, allowing a smart transmitter to report diagnostics, calibration data, and secondary variables over the same two wires used for the primary analog measurement — widely used for backward-compatible instrument commissioning and asset management.
Historian
A specialized time-series database that continuously records process values, alarms, and events at high resolution for long-term storage, trending, and analysis — distinct from a relational database because it is optimized for extremely high write rates of timestamped values and efficient compression of near-continuous analog trends.
HMI (Human-Machine Interface)
The graphical operator interface — screens, mimics, trend displays, alarm banners, and control widgets — through which an operator monitors and interacts with a SCADA or DCS system. HMI design follows human-factors guidance (ISA-101) to reduce operator error and improve situational awareness, favoring high-performance, low-clutter graphics over "Christmas tree" displays with excessive color and animation.

I

I/O Module (Input/Output Module)
A hardware card in a PLC or RTU rack that physically interfaces field wiring (sensors, switches, actuators) to the controller's processor — categorized as digital input (DI), digital output (DO), analog input (AI), analog output (AO), or specialty modules (thermocouple, RTD, high-speed counter).
IEC 61131-3
The international standard defining five standardized PLC programming languages: Ladder Diagram (LD), Function Block Diagram (FBD), Structured Text (ST), Instruction List (IL), and Sequential Function Chart (SFC). Standardizing on IEC 61131-3 lets engineers move between different PLC vendors' platforms with a shared programming vocabulary, though vendor-specific extensions still exist.
IEC 62443
The leading international standard series for industrial automation and control systems (IACS) cybersecurity, defining security levels (SL 0–4), the zone-and-conduit architecture model, and requirements for asset owners, system integrators, and product/component suppliers across the full ICS lifecycle.
Interlock
A logic condition that prevents an action (like starting a pump or opening a valve) unless specific safety or process conditions are met — for example, preventing a conveyor from starting unless all guard doors are closed. Interlocks may be implemented in the basic process control system (BPCS) for process protection or in a separate safety instrumented system (SIS) for safety-critical functions, and mixing the two without a documented safety requirements specification is a common design error.

K

Key Performance Indicator (KPI) — OT Context
In an OT/ICS context, KPIs commonly include overall equipment effectiveness (OEE), mean time between failures (MTBF), and alarm rate per operator — metrics derived from historian and SCADA data used to drive continuous improvement, distinct from purely IT-focused KPIs like network uptime.

L

Ladder Logic (Ladder Diagram) — IEC 61131-3
The most widely used PLC programming language, representing control logic graphically as rungs resembling an electrical relay ladder schematic, with contacts (inputs) and coils (outputs). Ladder logic's visual similarity to relay control circuits made it the natural first PLC language for electricians and technicians transitioning from hard-wired relay panels.
Latency
The time delay between an event occurring (a sensor state change) and the control system acting on it or displaying it to an operator. Latency requirements vary hugely by application — a few milliseconds for motion control, seconds for HMI trend updates, and minutes acceptable for remote pipeline SCADA polled over satellite.

M

MES (Manufacturing Execution System) — ISA-95
The software layer (ISA-95 Level 3) that sits between plant-floor control systems (Level 0–2) and enterprise business systems like ERP (Level 4), managing work orders, production scheduling, quality tracking, and genealogy — bridging real-time production data with business planning.
Modbus
One of the oldest and most widely supported industrial communication protocols, originally developed by Modicon in 1979, available in serial form (Modbus RTU/ASCII, typically RS-485) and Ethernet form (Modbus TCP). Modbus uses a simple master/slave (client/server) request-response model over function codes that read or write holding registers, coils, and discrete inputs — its simplicity is why it remains ubiquitous decades later, but it has no native authentication or encryption, which is a well-known OT cybersecurity weakness.
MQTT (Message Queuing Telemetry Transport)
A lightweight publish/subscribe messaging protocol, increasingly used to move industrial data from edge devices to cloud or enterprise IoT platforms. Unlike Modbus's request-response model, MQTT clients publish data to named "topics" on a central broker, and other clients subscribe to topics of interest — well suited to bandwidth-constrained or intermittently connected devices.

N

NERC CIP
The North American Electric Reliability Corporation's mandatory Critical Infrastructure Protection standards, which impose cybersecurity, physical security, and operational requirements on bulk electric system owners and operators in the U.S. and Canada — one of the few ICS cybersecurity frameworks with actual regulatory enforcement and financial penalties for noncompliance.
Normally Open / Normally Closed (NO/NC)
Describes the default (de-energized or unactuated) state of a switch, relay contact, or limit switch. A normally open contact is open (no continuity) until actuated; a normally closed contact is closed until actuated. Safety circuits typically favor normally closed contacts wired in series so that a broken wire or lost power fails to a safe (de-energized) state.

O

OPC UA (Open Platform Communications Unified Architecture)
A vendor-neutral, platform-independent data exchange standard for industrial automation that provides a unified information model, built-in security (authentication and encryption), and both client-server and publish-subscribe communication patterns. OPC UA is the modern successor to "Classic OPC" (OPC DA), which relied on Microsoft's DCOM and had poor firewall and cross-platform compatibility.
OT (Operational Technology)
Hardware and software that detects or causes changes in physical processes — PLCs, RTUs, DCS, SCADA servers, and the industrial network connecting them — as distinct from IT (information technology), which manages business data and applications. IT/OT convergence, driven by Ethernet and cloud connectivity reaching the plant floor, is the central trend (and central cybersecurity challenge) in modern industrial automation.
Overwriting Alarm / Alarm Flood
See Alarm Rationalization. A flood occurs when a single root-cause event cascades into a large volume of dependent alarms in a short period, overwhelming the operator's ability to identify and respond to the actual cause — a documented contributing factor in several major industrial incidents.

P

Polling
The process by which a master station (SCADA server or PLC) sequentially requests data from each connected field device or RTU on a communication link, one at a time, in a repeating cycle. Polling interval directly trades off data freshness against network/radio bandwidth consumption — a common design decision for wide-area SCADA over limited-bandwidth links.
PID Control (Proportional-Integral-Derivative)
The most widely used feedback control algorithm, computing a controller output as a weighted sum of the error (proportional term), the accumulated past error (integral term), and the rate of change of error (derivative term), to drive a process variable to match a setpoint. PID tuning — selecting the proportional gain, integral time, and derivative time — is one of the most common practical tasks in process control commissioning.
PLC (Programmable Logic Controller)
A ruggedized industrial computer designed to execute control logic reliably in harsh environments (vibration, temperature extremes, electrical noise), reading inputs, executing a user program (commonly ladder logic), and driving outputs in a repeating scan cycle. PLCs replaced hard-wired relay logic panels starting in the late 1960s and remain the workhorse controller for discrete manufacturing and machine control.
Point (Tag/Point Database)
A single named data value in a SCADA or historian system representing one measured or calculated quantity — a specific analog input, digital status, or setpoint — uniquely identified by a "tag name." The tag database (or point database) is the master list of every such point in the system, along with its engineering units, scaling, alarm limits, and description.
PROFIBUS / PROFINET
PROFIBUS is a serial fieldbus protocol (DP and PA variants) widely used in European process and factory automation; PROFINET is its Industrial Ethernet successor, supporting standard TCP/IP communication as well as a real-time (RT) and isochronous real-time (IRT) mode for motion control applications requiring microsecond-level determinism.
Purdue Model (Purdue Enterprise Reference Architecture)
A widely referenced hierarchical model (originating from the Purdue Enterprise Reference Architecture, later adapted by ISA-95 and NIST) that segments an industrial enterprise into levels — Level 0 (physical process/sensors), Level 1 (basic control, PLCs/RTUs), Level 2 (supervisory control, HMI/SCADA), Level 3 (site operations/MES), Level 4 (business logistics/ERP), Level 5 (enterprise/cloud) — used as the primary reference architecture for designing network segmentation and cybersecurity zones in ICS environments.

R

Redundancy (Hot Standby / Warm Standby)
A design approach providing a backup controller, server, or communication path that takes over automatically (hot standby, with near-instant, bumpless failover) or with a brief re-initialization delay (warm standby) if the primary unit fails, used to meet high-availability requirements for critical processes.
RTU (Remote Terminal Unit)
A microprocessor-based field device that interfaces sensors and actuators to a SCADA master station over a wide-area communication link (radio, cellular, satellite, leased line), historically distinguished from a PLC by its emphasis on communication protocols and low-power operation for unmanned, geographically remote sites (pipelines, well pads, substations, lift stations) rather than dense high-speed discrete control. Modern RTUs and PLCs have converged significantly in capability, and the terms are sometimes used loosely.

S

Scan Cycle / Scan Time
The time a PLC takes to complete one full pass through reading inputs, executing the user program, and updating outputs. Scan time determines the fastest a controller can respond to a changing input and is a key sizing consideration for high-speed applications like motion control or fast-acting safety functions.
SCADA (Supervisory Control and Data Acquisition)
A control system architecture combining a central master station (with HMI, historian, and alarm management software) with distributed field controllers (RTUs or PLCs) connected over a wide-area or plant-wide communication network, used to monitor and supervise processes that may be geographically dispersed — pipelines, water/wastewater networks, electric transmission and distribution, and building automation systems.
Sequence of Events (SOE) Recorder
A device or software function that timestamps digital status changes with high resolution (often 1 millisecond or better) and stores them in the exact order they occurred, critical for post-incident forensic analysis of fast-moving electrical faults or process trips where standard SCADA scan rates would blur the true sequence.
Setpoint
The target or desired value that a control loop attempts to maintain a process variable at — for example, a setpoint of 180°F for a boiler outlet temperature control loop.
SIS (Safety Instrumented System) — IEC 61511
An independent control system dedicated to safety instrumented functions (SIFs) — automatically bringing a process to a safe state when predetermined conditions are violated — designed and maintained separately from the basic process control system (BPCS) so that a failure or compromise of the BPCS does not also disable the safety function. SIS components carry a Safety Integrity Level (SIL 1–4) rating reflecting their required probability of failure on demand.
Structured Text (ST) — IEC 61131-3
A high-level, text-based PLC programming language resembling Pascal, well suited to complex mathematical calculations, string handling, and algorithms that are cumbersome to express in ladder logic — increasingly popular for advanced process control and recipe management logic.

T

Tag
See Point. The common name for a single named data item in a SCADA/HMI/historian database.
Telemetry
The automated transmission of measurement data from a remote or unattended location back to a monitoring station — the broad category of function that RTUs and SCADA communication links perform.
Time Synchronization (NTP/PTP)
The process of keeping clocks across all SCADA servers, RTUs, and PLCs aligned to a common reference time — using Network Time Protocol (NTP, millisecond-level accuracy) or Precision Time Protocol (PTP, IEEE 1588, microsecond-level accuracy) — essential for correctly ordering alarms and events across a distributed system, particularly for sequence-of-events analysis and electrical protection coordination.

U

UL 508A
The UL standard governing the construction of industrial control panels in North America — covering wire sizing, overcurrent protection, short-circuit current rating (SCCR), enclosure requirements, and marking — compliance with which is typically required for a panel to be legally installed and insured in most U.S. jurisdictions.
Unidirectional Gateway (Data Diode)
A hardware device that physically permits data flow in only one direction (typically OT-to-IT, for historian or reporting data), making it physically impossible for any signal, command, or malware to travel back into the control network — used as a stronger alternative to a firewall for protecting the most critical control zones per IEC 62443 zone/conduit design.

V

VFD (Variable Frequency Drive)
A power electronics device that controls the speed and torque of an AC induction or synchronous motor by varying the frequency and voltage of the power supplied to it, commonly integrated with SCADA/PLC systems over a fieldbus (like EtherNet/IP or PROFIBUS) both to command a speed reference and to read back drive status, fault codes, and energy consumption data.
Virtual LAN (VLAN) — OT Network Segmentation
A logical (rather than physical) network segmentation technique used to separate traffic types — for example, separating PLC-to-I/O traffic from HMI-to-server traffic on a shared physical switch — commonly used as one layer of defense-in-depth network segmentation in an ICS environment, though VLANs alone are not considered a strong security boundary against a determined attacker.

W — Z

WAN (Wide Area Network) — SCADA Context
The communication infrastructure — licensed radio, cellular, microwave, leased telephone circuits, or fiber — connecting geographically dispersed RTUs and field sites back to a central SCADA master station, as distinct from the local-area network (LAN) inside a single control room or plant.
Watchdog Timer
A hardware or software timer that must be periodically reset ("kicked") by the controller's normal program execution; if the timer expires without being reset — indicating the program has hung or crashed — it forces the controller or communication module into a predefined safe state, commonly de-energizing outputs.
Zone (Security Zone) — IEC 62443
See Cybersecurity Zone/Conduit. A grouping of logical or physical assets sharing common security requirements, forming the basic building block of ICS network security architecture.

Quick Reference Table — Selected SCADA/ICS Acronyms

AcronymFull TermKey Point
SCADASupervisory Control and Data AcquisitionSupervises geographically dispersed control
DCSDistributed Control SystemDense continuous control within one facility
PLCProgrammable Logic ControllerExecutes user logic in a repeating scan cycle
RTURemote Terminal UnitField controller for remote, low-bandwidth sites
HMIHuman-Machine InterfaceOperator graphics and control widgets
OPC UAOpen Platform Communications Unified ArchitectureVendor-neutral, secure data exchange standard
DNP3Distributed Network Protocol 3Utility SCADA protocol, IEEE 1815
CIPCommon Industrial ProtocolBasis for EtherNet/IP, DeviceNet, ControlNet
SISSafety Instrumented SystemIndependent safety shutdown system, IEC 61511
MESManufacturing Execution SystemISA-95 Level 3, between control and ERP