Test Simulation

The tank levels are showing full! Why could this be? Try searching for the problem, maybe its caused by a cyber incident! Click parts of the diagram to find the fault!

This valve is closed. Is this also normal behaviour?

It seems like our system is having more problems! Have a look around to see what looks out of place! Be sure to click on elements that look unusual

The tank level is showing full! However it looks like our system can't identify the tank

It looks like our valves are closed again!

Everything looks healthy and safe here! Look closer!

Tank levels are getting high here, but that doesn't seem to be the issue.

Your HMI and operator stations are just normal computers under the fancy graphics!If you see an antivirus alert pop up, escalate it immediately to the person responsible!

Virus Alert!

Click me to continue!

• Do you know what they look like on your systems?
• Who is your escalation contact?
• Is there a documented process for reporting?

• Report and Escalate!

This isn't normal!?

Administrator & Engineering Mode

Click me to continue!

This one is a subtle one.. Well done!If you see that the HMI or operator station is running in administrator or engineer mode instead of the normal operator mode, this is a significant concern. These elevated modes grant broader access to system settings, configurations, and control logic, increasing the risk of unintentional or malicious changes.

• Notify Supervisors and Cybersecurity Teams!
• Ensure Process Safety!
• Document and Support the Investigation!
• Do not interact with the pop up!

A ransomware pop-up on the screen of an HMI or operator station, this is a critical situation that indicates the system has been compromised. Avoid interacting with the ransomware window or attempting to close it, as this could trigger further malicious actions. Do not attempt to pay the ransom or follow any instructions in the pop-up

The scary stuff!

Ransomware!

Click me to continue!

It seems like all of our valves are suddenly closed in the process! Although there are numerous causes for this, one often under evaluated cause is a cyber attack. Attackers have the abilities to take over control and modify parameters!

Process Changes!

Click me to continue!

• Verify the situation!
• Follow Safety Procedures
• Report and Escalate
• Isolate and Investigate

Looks like our HMI and process is safe right now

Healthy HMI!

Click me to move on!

Be sure to take note of what a "normal" process looks like when viewing your operator station or HMI. What does it look like in your place of work?Lets see if you can identify some problems that could be caused by a cyber incident!

• Verify System Health and Cross-Check Data
• Follow Safety Procedures
• Report the Issue and Escalate
• Investigate the Cause

Where is our data!

Values are missing!

Click me to continue!

"Null" or missing values for components and pressures on the HMI typically indicates a loss of communication or data corruption, which could be due to network issues, sensor malfunctions, or even a potential cyber-attack. Once again: