346 Handbook of SCADA/Control Systems Security
A festering concern among many plant/operator owners is the growing amounts of
data/information that is being required to be recorded, logged, stored, and retained,
for extended periods of time. In the majority of these circumstances, IT does not know
much about the process data being collected—to them, it represents a “black box” or
sorts, and is a process maintained by engineering or operations; IT’s role are that of
“data custodians,” ensuring that data/information ows from one source or location,
to another, or to its nal destination. IT does not ask what the data/information is, why
it is being recorded, logged, stored, or retained; and in those same circumstances are
told by engineeri