Instrumentation & Control Architecture

A layered control architecture separates plant control, machine protection, and safety functions with clear independence.

Instrumentation and control (I&C) is the nervous system of the installation. Its architecture is layered so that ordinary plant control, fast machine protection, and safety functions are separated and appropriately independent, following the defense-in-depth principle that a failure in one layer does not defeat the others.

Control layers

• Safety system — independent, drives the plant to a safe state; highest authority
• Machine protection — fast trips, magnet discharge, and interlocks
• Plant control — setpoints, sequencing, and normal operation
• Instrumentation — the sensors and diagnostics feeding all layers

Independence and diversity

Safety and protection functions do not depend on the normal plant-control system to act. They use independent sensors and logic where required, so that a fault or a cyber compromise of the control layer cannot prevent a trip. This separation is verified during commissioning by fault injection.

Operator interface

Operators work through the plant-control layer with clear indication of machine state, alarms, and the status of protection and safety systems. The architecture is designed at design stage against the frozen machine; it is engineered and simulated, not yet built.