PLC, SCADA, HMI, historian and engineering-workstation risks cannot be judged from software versions alone. The review has to identify control function, communication dependency, support route, recovery evidence and the consequence of failure or unauthorised change.
The full assessment produces findings tied to affected systems and a sequenced action register, rather than an undifferentiated vulnerability list.
