Cell Register

Inspection and vision

Cameras, readers, scanners and sensors that decide whether product passes and whether a person is in a zone. Some of them are safety functions; some of them now carry a model that learns.

Classes in this family

6; 2 adaptive by default, 1 whose wrong action reaches a person

Zones this family sits in

lineLine zone: the controllers, drives and stations of one production line, sharing a network and a supervisor. Conduit: line to plant supervisory: the line reports up and takes recipes down through a boundary device with a deny-by-default rule set.
cellCell zone: one machine or one closely coupled group with its own controller, the lowest level a conduit can be drawn at. Conduit: cell to line: the controller talks up to the line supervisor over one documented conduit, nothing else in.
businessSite business zone: the IT side of the boundary, reached from the plant only through a controlled conduit. Conduit: site business to plant: brokered through the DMZ, jump host and recorded session for anything that reaches down.
safetySafety zone: safety controllers, safety scanners and instrumented systems, kept on their own conduit so nothing on the process side can command them. Conduit: safety to line: a safety conduit that carries status out and accepts no command in from the process network.

What reaches this family

IEC 62443Attaches to every automated asset the owner runs, in every zone class; the rows differ by zone, by connectivity and by behaviour. Binds Part 2-1 binds the asset owner; Part 3-2 is the owner's zoning and risk assessment; Part 3-3 is what the owner specifies for the system. Part 2-4 binds the service provider and Parts 4-1 and 4-2 the product supplier, so those rows are rendered as what to ask.
SP 800-82Attaches to every asset as the OT-specific overlay: architecture, remote access, patching in OT and incident response. Binds guidance addressed to the operator of the OT environment: it binds nobody in law and is what most OT security programmes are assessed against.
AI ActAttaches only to an adaptive controller or a safety component that is an AI system; a fixed-program machine gets no row, and the page says why. Binds Articles 26 and 4 bind the deployer, which is the asset owner using the system; Articles 12 to 15 bind the provider; a deployer that substantially modifies the system becomes its provider.
Machinery RegulationAttaches to every physical machine and safety component; a controller, a server or a read-only sensor carries no row of its own. Binds the manufacturer of the machine, and whoever substantially modifies it; the owner's row is what to demand at purchase and hold, and what it becomes liable for on a substantial modification.
ISO 27001Attaches the supplier and change controls to every asset and the network controls to every connected one. Binds the organisation that holds the certificate, through the Annex A controls it declared applicable.

Register the assets in this family

Paste the list; every asset in this family is placed in its class, given its zone and SL-T, its behaviour and connectivity, and carries the rows above. Eight assets free, no account.

Build my cell register