r/CPRE

Assume Breach: If PLC Logic Can Be Manipulated, How Do We Prevent Physical Consequences?

In April 2026, the FBI, CISA, NSA, EPA, DOE, and U.S. Cyber Command issued a joint advisory warning that internet-connected operational technology (OT) devices, including Rockwell Automation/Allen-Bradley PLCs, were being actively exploited across multiple critical infrastructure sectors. The advisory was later updated to include Schneider Electric and Siemens PLCs, along with guidance for detecting malicious or unauthorized PLC project code.

Cybersecurity remains the first line of defense. Strong identity management, network segmentation, monitoring, and secure engineering practices are essential.

But what if we assume breach?
If an attacker can modify PLC logic or engineering project files, what additional engineering safeguards can prevent unsafe physical consequences?

Some examples:

1. Independent physics-based validation of process commands.
2. Process-aware controls that reject commands outside safe operating limits.
3. Independent safety mechanisms that remain effective even if a PLC is compromised.
4. Resilient architectures that maintain safe operations during cyber incidents.
5. Digital twins or process models that continuously validate expected system behavior.

The objective isn’t just to recover after an attack—it’s to prevent a cyber incident from becoming a physical incident.

This is the problem space I believe Cyber Physical Resilience Engineering (r/CPRE) should address by integrating cybersecurity, control engineering, process safety, and operational resilience.

What additional engineering approaches do you think are needed to keep critical infrastructure operating safely when cyber defenses are bypassed?

Joint Cybersecurity Advisory (Official):
Iranian-Affiliated Cyber Actors Exploit Programmable Logic Controllers Across U.S. Critical Infrastructure (AA26-097A)⁠ https://www.ic3.gov/CSA/2026/260407.pdf

Cybersecurity has matured significantly over the last three decades. Identity, Zero Trust, EDR, SIEM, threat intelligence, AI, and incident response have all made organizations more secure.

But critical infrastructure presents a different challenge.

If a corporate network is compromised, the impact is often measured in data, money, or downtime.
If a water treatment plant, power grid, or industrial control system is compromised, the consequences can become physical.

That led me to a simple question:
What if we designed critical infrastructure assuming cyber incidents will happen?

Instead of asking only “How do we stop attackers?”, we should also ask:
How do we keep water safe?
How do we keep electricity flowing?
How do we prevent unsafe physical states?
How do we recover while maintaining safe operations?

That is the motivation behind Cyber Physical Resilience Engineering (CPRE).

Cybersecurity remains essential. CPRE builds on that foundation by integrating engineering, operations, process safety, and resilience into the design and operation of critical infrastructure.

I’d love to hear your thoughts. What capabilities do you think are missing today?