
SCADA Protocol Architecture & Integration Design
Design secure multi-protocol SCADA systems with architecture frameworks
What You Can Do
You can design scalable, compliant multi-protocol SCADA architectures that integrate legacy systems with modern industrial IoT devices. The skill analyzes protocol compatibility constraints, generates secure data flow diagrams, and provides vendor-neutral integration templates that reduce deployment risk. You'll produce architecture recommendations, decision matrices, security mappings, and compliance checklists validated against industry standards like NERC CIP and IEC 62443.
Features
Evaluate Modbus, Profibus, IEC 60870-5-104, DNP3, and OPC UA interoperability with latency and security tradeoffs
Choose between hierarchical, mesh, federated, and hybrid topologies with pros/cons analysis for your scale
Map authentication, encryption, field-level validation, and audit logging requirements across protocol layers
Create gateway configurations, edge device setups, historian connectors, and deployment checklists
Generate ASCII and Mermaid diagrams showing device communication paths, bottlenecks, and failure modes
Plan bridging strategies (e.g., Modbus→MQTT→Cloud, Profibus→OPC UA) with configuration examples
Cross-reference NERC CIP, IEC 62443, IEEE 1815, and industry-specific regulations to architecture components
Identify cybersecurity, availability, data quality, and operational risks with concrete countermeasures
Example Output
Protocol Compatibility Matrix
| Protocol | Latency | Native Encryption | Max Devices | NERC CIP | Integration Effort |
|---|---|---|---|---|---|
| Modbus TCP | <100ms | TLS only | 100–500 | Conditional | Low |
| Profibus | <50ms | None | 30–200 | No | Medium |
| IEC 60870-5-104 | <500ms | TLS 1.2+ | 1,000+ | Yes | Medium |
| OPC UA | <200ms | AES-256 | Unlimited | Yes | High |
Recommendation: Standardize on OPC UA for new deployments; bridge legacy Modbus/Profibus via secure gateway.
Network Topology
[Cloud Historian / Grafana]
|
[OPC UA Secure]
|
[Edge Gateway]
/ | \
Modbus DNP3 IEC870
/ | \
[RTUs] [Meters] [Substations]
Rationale: Centralized gateway isolates legacy protocols from modern systems; OPC UA provides unified encryption and certificate-based auth across upstream traffic.
Compliance Mapping (NERC CIP Level 3 Example)
| Component | CIP-005 (Access) | CIP-007 (Malware) | CIP-010 (Config) | Status |
|---|---|---|---|---|
| Edge Gateway | Firewall rules | Whitelisting + AV | Version control | ✓ Pass |
| RTU Comms | VPN/TLS | Protocol validation | Baseline | ✓ Pass |
| Historian DB | RBAC + MFA | Segmentation | Immutable logs | ✓ Pass |
| Legacy Modbus | Airgap recommended | N/A | Deprecated | ⚠ Mitigate |
What's Included
- SKILL.md: Multi-protocol SCADA architecture framework with decision trees and workflows
- Protocol compatibility matrix template: Modbus, Profibus, IEC 60870-5-104, DNP3, OPC UA, MQTT cross-reference
- Architecture decision tree: Hierarchical vs. mesh vs. federated topology selection logic
- Secure data flow template: Authentication, encryption, and audit mapping per protocol layer
- Integration checklist: Pre-deployment, configuration, testing, rollback, and validation steps
- Network topology diagram guide: ASCII and Mermaid diagram patterns
- Protocol gateway design patterns: Modbus→OPC UA, Profibus→MQTT, and legacy bridging strategies
- Compliance requirement mapper: NERC CIP, IEC 62443, and IEEE 1815 cross-reference
- Risk assessment framework: Cybersecurity, availability, data quality, and operational risk templates
Who It's For
- SCADA/ICS system architects designing enterprise control systems
- Control systems engineers planning protocol migrations or technology upgrades
- Industrial IoT consultants integrating legacy and modern devices
- Cybersecurity professionals conducting critical infrastructure audits
- Plant/operations engineers evaluating vendor solutions for site modernization
Best For
- Designing green-field SCADA architectures from scratch
- Evaluating protocol compatibility for mixed legacy and modern systems
- Planning migrations from older protocols (Modbus, Profibus) to modern standards (OPC UA, MQTT)
- Securing architecture reviews for critical infrastructure or NERC CIP-regulated sites
- Technology and vendor selection for system upgrades or new deployments







