A PLC controls one machine. SCADA is what lets someone see and coordinate all of them at once. How SCADA relates to PLC programming, and why industrial control system security is its own discipline.
A PLC controls one machine. SCADA is what lets someone see and
coordinate all of them at once — which is exactly why confusing the
two causes real integration headaches when a plant tries to scale up
its monitoring beyond a single line.
Supervisory Control and Data Acquisition (SCADA) is a system
architecture for monitoring and controlling industrial processes across
a plant or facility, not a single device. At the field level, PLCs and
remote terminal units (RTUs) handle the actual real-time control of
individual machines and sensors. SCADA sits above that layer, gathering
data from those field devices, presenting it through a Human-Machine
Interface (HMI) for operators, and giving supervisory-level visibility
and control across the whole system.
| PLC | SCADA | |
|---|---|---|
| Scope | Controls a single machine or process | Monitors and supervises multiple systems across a plant |
| Function | Executes real-time control logic (ladder logic, etc.) | Aggregates data, visualizes it, and allows supervisory control |
| Typical user | Controls engineer, maintenance technician | Plant operator, supervisor |
Our related guide on Siemens
PLC ladder logic covers the device-level programming layer that
feeds data up into a SCADA system — the two are complementary layers of
the same automation stack, not competing technologies.
Because SCADA systems connect field-level industrial control
equipment to plant networks — and increasingly to broader IT
infrastructure — they carry security risks distinct from a typical
office IT system, where a compromised HMI or exposed remote access
point can translate directly into a physical safety or production
incident, not just a data breach. NIST Special Publication 800-82,
“Guide to Industrial Control Systems (ICS) Security,” is the federal
reference specifically written to address this gap between traditional
IT security and the realities of industrial control environments.
Manufacturers with defense contracts should note that SCADA and
broader industrial control system security connects directly to the
compliance work covered in our related guide on
CMMC 2.0 compliance —
an unsecured SCADA or HMI access point can be exactly the kind of gap
that puts Controlled Unclassified Information at risk, even when the
SCADA system itself isn’t directly handling that data.
SCADA system design itself isn’t a standalone course in SCMEP’s
current catalog — it builds on the PLC and automation fundamentals
covered in our Automation and Robotics
training. As a NIST Manufacturing Extension
Partnership affiliate serving South Carolina manufacturers since
1989, our focus is connecting device-level control skills to the
plant-wide visibility SCADA provides.
If your plant is planning a SCADA or plant-monitoring project, you
can browse the Automation and Robotics
training catalog or email the training team.
The operator screens sitting on top of a SCADA system have their own design discipline. See our related guide on HMI design best practices for what the ISA-101 style guide standardizes about screen design.
SCADA handles real-time supervisory control of a specific process; a related technology aggregates sensor data more broadly across a whole fleet of assets. See our related guide on Industrial IoT (IIoT) for how it complements, rather than replaces, SCADA.
Supervisory Control and Data Acquisition — a system architecture for monitoring and controlling industrial processes across a plant, sitting above individual PLCs and RTUs at the field level.
A PLC controls a single machine or process with real-time logic. SCADA operates at a supervisory level, aggregating data from multiple PLCs and RTUs across a plant and presenting it through an HMI for operators.
A compromised SCADA system can translate directly into a physical safety or production incident, not just a data breach. NIST SP 800-82 is the federal guide specifically written to address industrial control system security.
Yes — an unsecured SCADA or HMI access point can be exactly the kind of network gap that puts Controlled Unclassified Information at risk for defense manufacturers, even when the SCADA system doesn’t directly handle that data.
