Physical isolation for gas SCADA, AGI control and safety systems

Gas operators run a high-consequence SCADA estate across compressor stations, above ground installations and pressure reduction stations. Firevault Control puts a real boundary between the office, the SCADA control room, the AGI telemetry and the safety systems behind them.

100%

Safety system isolation from control fabric

Zero

Persistent remote access to AGI and PRS controllers

7

Control modules deployed per gas zone

Full

Evidence for NIS2, COMAH and Ofgem

"If the safety system and the control system share a network, you do not have a safety system. You have a wish."

Where each module is deployed, and what it does there.

One row per module. Placement on the network, then plain-English purpose at that point.

1. Isolate

   At every Purdue boundary and around the SIS

   Office, SCADA, AGI control and safety systems all sit on separate physical fabrics. Safety integrity is never on the same network as control.

2. Firebreak

   On the L5 to L4 link and the L4 to L3.5 link

   Real off switches on the public and office boundaries during a live incident.

3. Validate

   On the L5 to L4 link and inside the L3.5 DMZ

   Shipper, engineering and flow traffic is checked for origin and integrity before it crosses into operations.

4. Relay

   Inside the L3.5 DMZ

   Cross-domain data moves on scheduled routes only.

5. Execute

   Inside the L3.5 DMZ and on the L2 to L1 link

   Firmware, pressure setpoints and valve actions hold until the right authority signs them off.

6. Lock

   On the L2 to L1 link and the L1 to L0 link

   Access to AGIs, PRS and compressors ties to named engineers. Standing access is the exception.

Sovereign gas data

Operational and shipper data remains within the agreed jurisdiction in carefully selected Firevault Bunkers.

Multi-party control

Pressure and major valve operations require sign-off from both control room and security teams.

Regulatory evidence

Continuous compliance evidence aligned to NIS2, HSE COMAH and Ofgem cyber expectations.

Out-of-band management

Cellular and dedicated paths keep the control plane reachable when primary networks are compromised.

Tamper-proof logging

Every access, configuration change and pressure action lands in immutable logs on physically separate infrastructure.

Verified configuration baselines

Verified baselines of AGI, PRS and compressor configuration enable a known-good restore of control-plane state.

Network assessment

Map every path between corporate IT, SCADA, AGI control and the safety integrity systems to identify convergence and persistent vendor connections.

Zone architecture design

Design physically separated zones aligned to your transmission and distribution estate, with Control modules at each boundary.

Non-production pilot

Deploy in a test environment mirroring an AGI and SIS pair with full zone separation, multi-party authorisation and compliance logging.

Operational deployment

Full deployment across the gas estate with verified configuration baselines, continuous compliance evidence and 24/7 out-of-band management.