Skip to main content

IT Systems: Big Data, Analitics and AI Readiness, Cybersecurity&Virtualization

Virtualization and Cyber ​​Security

IT Systems: Big Data, Analytics and AI Readiness

Cyber Security

SimTec carries out advanced projects involving the virtualization of upper-level SCADA system layers. Leveraging the VMware vSphere environment—and utilizing carefully selected virtualization servers (DELL, Fujitsu, HP) alongside central disk arrays (e.g., NetApp or DELL)—we virtualize multi-computer systems, consolidating them into a single virtual environment. Operator terminals are built using Thin Clients selected according to the specific operating conditions; we deploy both standard terminals and specialized units (including IP65-rated models) supporting single or multi-monitor setups.

The virtualized environment enables the creation of redundant structures (High Availability) with the capability for dynamic virtual machine migration (vMotion and Replication) in the event of a failure. Distributed Thin Client setups can be configured to support stations with two or even four monitors.

We also possess experience in virtualizing the Siemens Simatic PCS7 environment. The entire upper layer of PCS7—or specific parts thereof—can be hosted within a virtual environment. This allows for significant space savings but, above all, reduces the latency often encountered in standard, complex, multi-server, and multi-computer SCADA architectures. Key advantages of the virtualized environment include ease of use, updating, and migration, as well as vLAN-based network segmentation and enhanced cybersecurity that is a basis of NIS2 EU directive based on IRC62443 norm.

Industrial Data Platforms

SimTec implements systems for the collection, storage, and analysis of large volumes of industrial data originating from the DCS, PLC, and SCADA layers. Utilizing process historians (PH), relational or time-series databases, and OPC UA communication, we consolidate measurement data, alarm and event archives, production records, and diagnostic information into a coherent data environment. For our clients, we deploy and maintain on-premises data lakes on customized virtualized infrastructure (servers, central disk arrays, network storage), so that the analytical environment operates with the same redundancy, backup, and high-availability mechanisms as the supervisory control systems.

Our OT engineering expertise allows us to interpret process data in the context of the installation and of the control logic that produces it. This removes the bottleneck that most often delays industrial analytics projects.

Big Data Analytics

We work with plant management on processing and analysis of production data. Our combination of industrial automation and data science expertise gives us a distinct advantage across a broad range of services: assessment of data quality, identification and attribution of downtime causes, decomposition of OEE indicators, analysis of changeovers and product transitions, correlation of process parameters with product quality, and statistical process control (SPC).

Through the analysis of SCADA alarm and event archives, in accordance with the ISA 18.2 and EEMUA 191 standards, we help clients identify chattering, stale, duplicated, and nuisance alarms, and rationalize the alarm configuration to reduce the burden on plant operators.

Industrial Intelligence: Machine Learning for OT and Cybersecurity

Applying statistical methods and machine learning algorithms, we develop anomaly detection and early warning systems, and provide decision support for optimization of process parameters, emissions, energy consumption, and process throughput. Automated comparison of control system configuration against approved baselines supports the system integrity requirements of IEC 62443-4-2 and produces documented evidence for audits.

Complementing process-level intelligence, we help our clients implement IDS (Intrusion Detection System) and IPS (Intrusion Prevention System) solutions, and build correlation and classification mechanisms that support the incident handling and reporting obligations arising from the NIS2 Directive and the Polish Act on the National Cybersecurity System.

Data Systems for Management of Critical Public Infrastructure

Traffic management systems

We implement data-driven traffic control systems for road tunnels, urban corridors, and technical infrastructure objects using measurements from inductive loops, radar, or video-based detection.

Our adaptive signal control systems enable automatic incident detection, congestion forecasting, and demand-responsive control. For tunnels within the trans-European road network, our implementations support the operational and reporting requirements of Directive 2004/54/EC on minimum safety requirements for road tunnels.

Airport operational data systems

We implement systems that support airport operations that follow ICAO Annex 14 and applicable EASA requirements.

On the airside, this covers the integration of airfield ground lighting control and stand and gate management with operational data, and the analysis of turnaround performance in line with Airport Collaborative Decision-Making (A-CDM) milestones.

On the landside, we build passenger flow analytics and queue forecasting for check-in, security screening, and border control, enabling efficient resource allocation.

AI readiness for universities, hospitals, and research institutions

We conduct AI readiness assessments for public institutions preparing to use machine learning in research, operations, or clinical support, covering evaluation of available data quality, governance and access control infrastructure required for on-premises model training and inference, and meeting regulatory obligations (EU) 2024/1689 (the AI Act) and the GDPR.

Cybersecurity in OT (IEC 62443, NIS2), DMZ Zones

Cybersecurity for OT (Operational Technology) systems is a critical issue today. In compliance with cybersecurity legislation and the NIS2 (Network and Information Systems) Directive, an increasing number of facilities are required to ensure an appropriate level of protection for their operations. SimTec possesses the expertise and experience to provide essential protection for supervisory environments—including PLC, DCS, SCADA, remote access, and data archiving systems—as well as virtualization environments. Through our own services and a consortium of companies specializing in specific fields, we conduct cybersecurity audits covering both OT and IT areas.

We implement:

DMZ systems (WSUS, WEC, Syslog, RDP, Management Station, Antivirus)
IPS/IDS protection systems (e.g., FortiGate firewall + Nozomi)
Backup & Restore servers for SCADA systems (SRV/ES/OS/WEB) in RUN mode
OPC UA servers
Jump servers for remote access (PAM)
LAN and VLAN design and configuration
Migration of operator systems to virtualized environments
Consulting in the aforementioned areas
In the field of cybersecurity, we collaborate with companies such as VEEAM, DELL, and DAGMA (IT Security). We work with providers of cybersecurity solutions, as well as NAS storage and disk arrays, including ARROW (DELL, Broadcom, VMware, Pure Storage) and Arkanet (Fortinet, FortiGate, FortiSwitch). Training on the IEC 62443 standard and the NIS2 Directive is provided by our partner, INTEX.

© SimTec. All Rights Reserved. RODO