Skip to main content

Do no harm


Having endured another restless night, Oscar reaches for the alarm.   His mind wanders as he recalls the nightmare which seems to be top of mind, even as the sun peaks through the windows.   Their service company,  WeHelpU was in court defending their position regarding the data breach at the "TrustMe nuclear plant".   They,  like many other service providers, WeHelpU jumped on the IoT bandwagon a couple of years ago.  It didn't take long for Oscar to become overwhelmed, current situation aside, what about the thousands of our other customers?



A couple of years ago, in 2018, we established  rules of engagement to prevent us from being in this situation, where did we fail?



  • Air Gap | at first we were very disciplined to only install non-intrusive monitoring.  As our skills and knowledge broadened we started making exceptions.   Hey, we can save some capital if we just connect to the existing control system?
  • Cellular | while very tempting we stood our ground and never connected to the clients network,  sensors to the  gateway and gateway to the cloud.
  • Anonymized | this was the trickiest of all.  Fact is we have lots of sensors and actuators which all tie to assets,  which belong to sites,  sites which belong to clients.   Whether structured data sets or metadata tags, they are all vulnerable.   The short term recall of data is powerful for scheduled and unscheduled activity and needs to relate to the customer.   Long term data is helpful for models and AI, this data should be anonymous.



Our discipline, or lack thereof, will impact our organizations and our clients.   We simply don't know what we don't know, be curious but cautious.



-----

Next post:  who's data is it?

Thoughts?  feel free to leave replies or direct message

See all of the "last mile worker" posts here:  http://lastmileworker.com

-----


Comments

Popular posts from this blog

Speaking AI (artifical intelligence)

You're talking but I can't hear you.   Everyone can certainly understand this condition; the "Peanuts" parents who sounded exactly like your own, your significant other while you watch your favorite game on TV, or most importantly a work colleague or partner which you are attempting to communicate a thought or vision.   All of these, and many other examples, have plagued our organizations long past the childhood game of telephone (passing your words to another, and on to another, etc.).   So what?   What has changed?   Besides the velocity of products hitting the market, the requirements that we have for our business now needs to be interpreted by data scientists, yet another abstraction layer from the field conditions.   Think about this example; TODAY :   we often think in binary terms, if "x" happens do "y" …   take a sales person seeking potential leads by searching a system for the last time we made contact TOMMOR...

Are "mistakes" good or bad?

One of the attributes that make a great technician is the fact that they have made a lot of mistakes. Our biggest challenge is recalling those mistakes ourselves and as importantly sharing them with others on our team. Every single day we go out and fix things, many of them are routine and may not require any form of documentation or sharing; however, there are those instances where we have discovered gold. The trick is to make sure that we can learn from our mistakes in a systematic manner and have the ability to spread the information throughout our organization in a useful and relevant way. Corrective action, an integral part of a quality system, is the absolute best vehicle to put in place for your organization. Some of you may have been turned off by the words "quality system", don't worry you can still deploy a corrective culture without having to understand completely how corrective action and quality management systems work. The process is very straightf...

months to aquire, moments to lose

It is just hard to imagine that one of the most common reasons maintenance contracts are lost is because people don't show up and don't pay attention to the details.   In many cases maintenance is an investment to keep the life of your asset running for a protracted period of time. However the length on many maintenance contracts is not even close to the life expectancy of that equipment, so if you don't really have any idea what maintenance is being performed then how do you really know if it's being done to your specification? Thus, it really boils down to business elements, assuming that you are actually performing the work, our focus needs to be on how you are differentiated. Let's take a look at a couple of the most common business-related reasons why people lose maintenance contracts. Not showing up ; managing contracts can be complicated between the sites, number of assets, and the frequencies at which items need to be maintained, can a...