RSC Sphere: Data Integration, Security and Trust

The Data Integration, Security and Trust Sphere establishes the governance layer that makes everything else credible. It focuses on system interoperability, data mapping, version control, audit trails, and security alignment for regulated environments. The content makes clear how execution data can move safely across ERP, MES, QMS, PLM, and supplier systems without compromising control. This sphere proves that interoperability and security can coexist in aerospace ecosystems.

  • reference architecture

    A reference architecture is a structured, technology-agnostic blueprint that describes the key components, layers, relationships, and interfaces within a particular problem domain or class of systems. It provides a common map for how things are organized, but does not prescribe a single product, vendor, or implementation.

    Key characteristics

    In industrial and manufacturing environments, a reference architecture commonly:

    • Defines logical layers (for example, physical assets, control systems, MES, enterprise systems, business processes)
    • Describes standard interfaces and data flows between OT and IT systems
    • Organizes concerns such as security, data models, and lifecycle management
    • Aligns with existing standards where possible, without duplicating them
    • Is technology-agnostic and does not mandate particular vendors or products

    A reference architecture is typically used to:

    • Provide a shared vocabulary for engineering, operations, quality, and IT teams
    • Support comparison and selection of system designs against a known structure
    • Identify integration points between MES, ERP, PLM, historians, and shop-floor systems
    • Guide long-term modernization, such as Industry 4.0 initiatives, without dictating detailed designs

    Operational meaning in manufacturing

    Within regulated manufacturing, a reference architecture commonly appears as:

    • Architecture diagrams showing how equipment, PLCs, SCADA, MES, LIMS, QMS, ERP, and analytics platforms connect
    • Layered models that separate field devices, control, supervision, operations management, and business planning
    • Standardized patterns for data collection, traceability, and audit evidence flow across systems
    • Supporting material for internal governance, change impact assessment, and validation planning

    It is a planning and communication tool, not an implementation specification. Individual plants or programs adapt it into detailed solution architectures and system designs that reflect specific technologies, vendors, and constraints.

    Relation to RAMI 4.0 and other models

    RAMI 4.0 (Reference Architectural Model Industry 4.0) is an example of a reference architecture that organizes Industry 4.0 concepts across layers, lifecycle stages, and hierarchical levels. Similar roles are played by:

    • ISA-95 models that structure integration between control, MES, and ERP levels
    • Reference architectures for industrial IoT or edge computing that describe connectivity and data management patterns

    These models offer structured views and terminology that teams can use to align designs and discussions. They do not, by themselves, guarantee regulatory compliance, cybersecurity, or interoperability.

    What a reference architecture is not

    To avoid confusion, a reference architecture is not:

    • A detailed system design or configuration specification
    • A validated or approved implementation
    • A complete standard operating procedure or work instruction
    • A compliance certificate or proof that a system meets regulatory requirements

    Common confusion

    • Reference architecture vs. solution architecture: A reference architecture is generic and reusable across multiple projects or sites. A solution architecture is specific to a particular implementation, technology stack, and environment.
    • Reference architecture vs. standard: A standard defines formal requirements or rules. A reference architecture provides structured guidance and examples, and may reference standards, but is not itself a binding requirement.
  • analytics layer

    The analytics layer is an architectural layer in industrial and manufacturing systems that focuses on collecting, modeling, and analyzing data from multiple sources to support monitoring, optimization, and decision-making. It typically sits above raw data collection layers and below business planning or enterprise reporting layers.

    What the analytics layer includes

    In a manufacturing or Industry 4.0 context, the analytics layer commonly includes:

    • Data aggregation from OT and IT systems such as PLCs, historians, MES, LIMS, QMS, ERP, and maintenance systems
    • Data modeling and contextualization, for example mapping tags, batches, equipment, and work orders into a unified information model
    • Analytical processing such as KPIs, trend analysis, anomaly detection, statistical process control, and root cause analysis
    • Visualization components like dashboards, reports, and self-service analytics tools for operations, quality, and engineering teams
    • Advanced analytics workloads, including predictive models, optimization algorithms, and in some cases machine learning pipelines

    The analytics layer may be implemented using on-premise platforms, cloud services, or a hybrid architecture. It often exposes results through APIs, dashboards, or integration back into MES, ERP, or workflow systems.

    What the analytics layer is not

    To avoid confusion, the analytics layer is distinct from:

    • Control layer: Real-time control of equipment and process parameters (PLCs, DCS, SCADA). The analytics layer may consume control data but does not directly execute control logic.
    • Data acquisition layer: Systems that primarily collect and store raw data, such as historians and IoT gateways. The analytics layer uses this data but focuses on analysis and interpretation.
    • Business applications layer: Systems like ERP, APS, or CRM, which support enterprise processes. The analytics layer may supply metrics and insights to these systems but is not itself a transactional system of record.

    Operational role in Industry 4.0 architectures

    Within multi-layer Industry 4.0 or smart factory reference models, the analytics layer usually:

    • Bridges shop-floor data and enterprise decision-making by turning events and measurements into actionable metrics
    • Supports use cases such as OEE tracking, energy monitoring, yield analysis, deviation investigation, and asset performance analysis
    • Provides standardized interfaces and models so different sites or product lines can be compared consistently
    • Contributes to traceability and evidence generation by preserving analytical results linked to batches, lots, or work orders

    In regulated environments, the analytics layer may need to align with validation, data integrity, and audit trail expectations, especially when analytics outputs inform quality decisions or product release.

    Common confusion

    The term “analytics layer” is sometimes used interchangeably with related concepts:

    • Data lake or data warehouse: These are data storage and modeling technologies that can underpin an analytics layer, but the analytics layer also includes the analytical logic, governance, and presentation components built on top.
    • Operations intelligence platform: This often describes a product that implements most or all of the analytics layer, along with visualization and alerting features.

    In some architectures, the analytics layer is split into separate layers (for example, a semantic model layer and a visualization layer). The core idea remains that it is the part of the stack where raw manufacturing data is transformed into information and insight.

  • Gateway

    A gateway is a hardware device, software service, or embedded component that connects two or more different networks, protocols, or systems so they can exchange data in a controlled and structured way. In industrial and manufacturing environments, gateways commonly sit between OT equipment and higher-level IT or cloud systems.

    Core characteristics

    In regulated manufacturing and industrial operations, a gateway commonly:

    • Bridges different communication protocols (for example, OPC UA to MQTT, Modbus to OPC UA, or proprietary fieldbus to Ethernet)
    • Connects separate networks (such as a plant-floor OT network to a corporate IT network or DMZ)
    • Performs data mapping or transformation (converting raw tags or registers into structured data models)
    • Implements security and access controls (authentication, encryption, basic filtering of what data can pass)
    • Provides a single aggregation point for multiple devices or systems

    A gateway can be:

    • Physical: an industrial PC, edge device, or dedicated appliance mounted in a panel or rack.
    • Virtual or software-based: a service running on a server or in the cloud that exposes one interface to the plant and another to enterprise applications.

    Operational use in manufacturing

    Gateways appear in many layers of a manufacturing stack, for example:

    • Connecting PLCs and DCS controllers to an OPC UA server so MES, historian, or analytics tools can read standardized data
    • Exposing legacy serial or fieldbus equipment through modern Ethernet-based protocols
    • Acting as an edge gateway that sends filtered production data to cloud services
    • Separating OT and IT networks, sometimes as part of a demilitarized zone (DMZ) architecture

    Relation to OPC UA

    In an OPC UA context, a gateway often:

    • Connects non-OPC devices and protocols to an OPC UA server or client
    • Maps vendor-specific tag structures into an OPC UA information model
    • Acts as a secure boundary where OPC UA security settings, certificates, and access policies are enforced

    What a gateway is not

    To avoid confusion, a gateway is not:

    • Just a switch or hub: those forward traffic at lower network layers without protocol translation or data modeling.
    • Necessarily a firewall: some gateway products include firewall capabilities, but a firewall focuses on traffic filtering, not protocol bridging or data transformation.
    • Always an OPC UA server: a gateway may host an OPC UA endpoint, but "gateway" refers to the bridging role, not a specific standard.

    Common confusion

    The term "gateway" is sometimes used interchangeably with:

    • Protocol converter: a type of gateway focused narrowly on converting one protocol to another.
    • Edge device: an edge device may perform gateway functions, but it can also handle local analytics, buffering, or control.

    In industrial and regulated environments, it is useful to specify what a gateway actually does: which protocols it bridges, what security functions it provides, and how it integrates with control systems, MES, historians, and enterprise IT.

  • OPC

    OPC, originally “OLE for Process Control” and now commonly “Open Platform Communications,” refers to a family of industrial communication specifications used to exchange data between automation devices, control systems, and IT applications in a vendor‑neutral way.

    What OPC is

    In industrial and manufacturing environments, OPC commonly refers to a set of standards that define how process data, alarms, events, and historical information are modeled and transferred between:

    • Shop floor devices and control systems (PLCs, DCS, CNCs, analyzers)
    • SCADA and HMI systems
    • Manufacturing Execution Systems (MES) and historians
    • Higher-level IT systems such as ERP or analytics platforms

    OPC standards specify an interface and data model so that client applications (for example, an MES or historian) can read, write, and subscribe to data exposed by server applications (for example, a PLC gateway or data concentrator) without relying on vendor‑specific protocols.

    Main OPC specifications

    The term “OPC” can refer to the overall family or to specific generations of the standard:

    • OPC Classic: An older group of specifications (such as OPC DA, A&E, HDA) typically based on Microsoft COM/DCOM technology. These are widely deployed in legacy systems but are platform dependent and less flexible for modern architectures.
    • OPC UA (Unified Architecture): A newer, platform‑independent specification that unifies and extends the classic models. It adds a richer information model, built‑in security concepts, and support for modern transport mechanisms. OPC UA is the form most often discussed in current OT/IT integration projects.

    Operational context in manufacturing

    In a plant or regulated manufacturing environment, OPC is typically encountered as:

    • An OPC server provided by a gateway, PLC, or dedicated data integration node
    • OPC client components built into MES, historian, SCADA, or analytics software
    • A standard interface used for aggregating data from heterogeneous equipment for monitoring, electronic batch records, traceability, or quality investigations

    Adoption of OPC does not eliminate the need to design, validate, and monitor data flows. Implementations may vary by vendor, and security or data integrity requirements must be addressed by configuration, network design, and operational procedures.

    Common confusion

    • OPC vs OPC UA: “OPC” is the umbrella term for the whole family. “OPC UA” is the modern, unified architecture version. When someone says “OPC” without qualification, they may mean any of the specifications; context is important.
    • OPC vs fieldbus or device protocols: OPC is typically an abstraction layer on top of other industrial protocols (for example, Modbus, Profibus, proprietary PLC protocols). It does not replace those device‑level protocols but provides a standardized way to access the data they carry.
    • OPC vs MQTT or other publish/subscribe protocols: MQTT is a transport protocol, while OPC (especially OPC UA) defines both transport options and an information model. They can be used together or independently depending on architecture.

    Relation to OPC UA context

    OPC UA is part of the OPC family and is often what practitioners mean when discussing modern, secure, and platform‑independent industrial data exchange. In practice, plants may operate a mix of OPC Classic and OPC UA, especially during migration from legacy systems to newer architectures.

  • Manufacturing Integration Platform

    A Manufacturing Integration Platform (MIP) is a software layer that connects and coordinates data flows between manufacturing shop-floor systems and higher-level enterprise systems. It provides a central place to manage interfaces, data models and integration logic without replacing core applications such as MES, ERP, SCADA or LIMS.

    Core characteristics

    A Manufacturing Integration Platform commonly includes:

    • Connectivity to OT systems such as PLCs, DCS, SCADA, historians, PLC-based equipment, and standalone instruments.
    • Connectivity to IT and business systems such as MES, ERP, PLM, QMS, LIMS, warehouse systems and data warehouses or data lakes.
    • Common data models and mapping to translate machine- or vendor-specific data into standardized structures usable across applications.
    • Integration orchestration to manage workflows like order download to machines, result upload to MES or QMS, and event-based messaging.
    • APIs and services that expose manufacturing data to other systems, analytics tools and reporting environments.
    • Monitoring and diagnostics for interface health, message status and error handling.

    In regulated environments, the platform is often configured and governed to support data integrity, traceability of changes to integration logic, and controlled deployment processes, but those practices are organization-specific.

    How it is used in manufacturing operations

    Operationally, a Manufacturing Integration Platform typically:

    • Acts as the central hub for exchanging production orders, material data, specifications and recipes between ERP, MES and equipment.
    • Collects process data, alarms and results from machines and routes them to MES, QMS, historians or analytics tools.
    • Supports standardized interfaces across plants or lines so that new equipment or systems can be integrated more consistently.
    • Provides a controlled way to change integrations without modifying each endpoint system individually.

    The platform may be implemented using specialized integration products, iPaaS tools adapted to manufacturing, or a combination of middleware, message brokers and custom services that are managed as a unified layer.

    What it is not

    • It is not a replacement for MES, ERP, SCADA, PLM, QMS or LIMS. Those systems still own their business logic and records.
    • It is not only a data historian, although it may connect to one and route time-series data.
    • It is not limited to reporting. It also supports transactional workflows and bidirectional communication.

    Common confusion

    • Manufacturing Integration Platform vs. Manufacturing Information Portal: Some organizations use the same acronym (MIP) for a “Manufacturing Information Portal,” which focuses on presenting consolidated production data to users through dashboards or web portals. A Manufacturing Integration Platform focuses on system-to-system integration and data routing, and a portal may consume its data.
    • Manufacturing Integration Platform vs. MES: MES manages and records execution of manufacturing activities. A Manufacturing Integration Platform connects MES to other systems and equipment. In some products, integration and MES functions are bundled, which can blur this distinction.
    • Manufacturing Integration Platform vs. generic middleware or ESB: Generic integration platforms provide messaging and transformation. A Manufacturing Integration Platform applies similar concepts but is configured and structured around manufacturing-specific models, standards and protocols.

    Relation to standards and architectures

    In architectures aligned with models such as ISA-95, a Manufacturing Integration Platform often sits between Level 2 (control and supervision) and Level 3/4 (MES, ERP and business planning). It can help implement standardized interfaces, message flows and data structures between these levels without prescribing any particular vendor or standard.

  • Multi-Site Operations

    Core meaning

    Multi-site operations commonly refers to the coordinated management of manufacturing and related activities across two or more physical sites. These sites can include production plants, packaging facilities, warehouses, distribution centers, contract manufacturers, or quality control laboratories that are operated under a shared business, brand, or regulatory framework.

    In this context, “operations” covers day-to-day execution activities such as production, scheduling, maintenance, quality control, material flow, and support processes that must be aligned across all locations.

    Characteristics in industrial and regulated environments

    In industrial and regulated environments, multi-site operations typically involve:

    – **Multiple physical locations** working on related products, SKUs, or value streams.
    – **Shared standards and procedures**, such as common work instructions, quality policies, and master data structures.
    – **Centralized or harmonized systems**, for example ERP, MES, LIMS, QMS, CMMS, and data historians that span multiple plants.
    – **Coordinated planning and scheduling**, including capacity balancing, inter-site transfers, and contingency planning when one site is constrained.
    – **Consistent quality and compliance practices**, including aligned deviation handling, change control, and document management.
    – **Cross-site performance management**, using shared KPIs, dashboards, and reporting structures.

    Use in workflows and systems

    Multi-site operations is often used to describe how organizations structure and run their production network:

    – **Networked production**: Different sites may specialize in specific steps (e.g., bulk manufacturing in one site, filling and packaging in another), requiring coordinated material and information flows.
    – **Shared IT/OT architectures**: A single MES, ERP, or data platform may serve multiple plants, or plants may use separate instances that are integrated and governed centrally.
    – **Central governance and local execution**: Corporate or regional teams define global standards and master data, while each site executes and maintains local configurations within those standards.
    – **Cross-site visibility**: Operations, quality, and supply chain teams monitor OEE, throughput, yield, deviations, and inventory across the network to support decisions such as load shifting or risk mitigation.

    Boundaries and what it is not

    – **Not limited to a single building or line**: Multi-site operations always implies more than one distinct location; multiple lines or departments in one facility do not constitute multi-site operations.
    – **Not just multi-tenant IT**: While multi-site operations often relies on multi-plant system setups, the term refers to the operational network and coordination, not only to how software is deployed.
    – **Not only global operations**: Sites can be in the same city, country, or region; geographic distance is less important than the fact that they are distinct, separately operated locations.

    Common confusion and related terms

    – **Multi-plant operations**: Often used almost interchangeably with multi-site operations in manufacturing. Multi-plant usually emphasizes production facilities, while multi-site can also include labs, warehouses, and distribution centers.
    – **Distributed manufacturing**: Sometimes used for similar concepts, but often emphasizes decentralizing production closer to end markets or customers.
    – **Multi-site deployment (IT)**: In IT, this can describe how systems are installed across locations. In manufacturing, multi-site operations is broader, covering organization, processes, systems, and performance management.

    Site-context application

    On this site, multi-site operations typically relates to how organizations manage:

    – MES, ERP, and OT system architectures across multiple plants.
    – Harmonized quality, data, and compliance processes between sites.
    – Network-wide visibility into production, quality, and inventory.
    – Standardized problem-solving and continuous improvement approaches across the manufacturing network.

  • SOAP

    Core meaning

    SOAP (Simple Object Access Protocol) is a protocol specification for exchanging structured information between software systems using XML-based messages, typically over HTTP, HTTPS, or other transport protocols. It defines a formal message structure, standard encoding rules, and a processing model so that different applications and platforms can interoperate in a predictable way.

    SOAP messages usually consist of:

    – An XML envelope that identifies the message and its content
    – An optional header for metadata (such as security, routing, or transaction data)
    – A body that carries the operation request or response payload

    Use in manufacturing and enterprise integrations

    In industrial and regulated environments, SOAP is commonly used as one of the web service mechanisms for system-to-system integration, including:

    – MES–ERP integration for exchanging production orders, confirmations, material movements, and inventory data
    – Communication between manufacturing systems (MES, LIMS, QMS, WMS) and corporate or cloud applications
    – Service-oriented architectures where enterprise service buses (ESB) mediate SOAP-based messages

    Because SOAP has a well-defined contract approach (typically via WSDL), it is often used where stable, strongly typed interfaces and explicit change control are required.

    Characteristics and boundaries

    SOAP commonly includes:

    – **XML-only message format**: Payloads and control data are represented in XML.
    – **Explicit service contracts**: Interfaces are often described using WSDL (Web Services Description Language).
    – **Extensibility via headers**: Security, transactions, and reliability features are typically implemented in SOAP headers (e.g., WS-* specifications).
    – **Transport independence**: While often used over HTTP/HTTPS, SOAP can run over other transports (such as JMS or SMTP).

    SOAP does **not** refer to:

    – The REST architectural style or RESTful APIs, which do not rely on a specific envelope protocol.
    – General XML data exchange without the SOAP envelope or processing rules.

    Common confusion and related terms

    – **SOAP vs REST**: SOAP is a protocol with a formal envelope and processing rules. REST is an architectural style for building APIs, frequently using JSON or XML over HTTP without the SOAP envelope.
    – **SOAP vs generic web services**: “Web service” is a broad term. SOAP is one specific, standards-based web service protocol; others use REST/JSON, gRPC, or custom approaches.
    – **SOAP vs XML over HTTP**: Simply posting XML to an HTTP endpoint does not make it SOAP; SOAP requires a compliant envelope and processing model.

    MES–ERP integration context

    In the context of MES–ERP integration, SOAP-based web services commonly refer to:

    – Exposed ERP or MES endpoints described via WSDL that accept SOAP requests for operations such as order creation, posting confirmations, or retrieving master data
    – Middleware or ESB/iPaaS platforms that consume and produce SOAP messages to bridge legacy systems and newer REST or message-queue interfaces

    In regulated manufacturing, SOAP interfaces are often subject to formal change control, documentation, and testing because their contracts and payload structures are tightly defined and versioned.

  • SAP S/4HANA

    SAP S/4HANA is SAP’s integrated enterprise resource planning (ERP) suite built to run on the SAP HANA in-memory database. It is commonly used by manufacturers to manage core business and supply chain processes, including finance, procurement, production planning, inventory, sales, and maintenance.

    In industrial and regulated environments, SAP S/4HANA typically sits on the IT side as a system of record for planning, materials, master data, and commercial transactions, and is commonly integrated with manufacturing execution systems (MES), laboratory systems, and plant-level OT solutions.

    Scope and capabilities

    SAP S/4HANA commonly includes or connects to functional areas such as:

    • Finance and controlling (general ledger, cost centers, profitability analysis)
    • Materials management (purchasing, goods receipt, inventory, batch and lot information)
    • Production planning (MRP, work centers, routings, production orders, capacity planning)
    • Sales and distribution (customer orders, delivery, billing)
    • Plant maintenance / asset management (maintenance orders, notifications, asset structures)
    • Quality management (inspection lots, usage decisions, basic nonconformance tracking)

    For manufacturing operations, SAP S/4HANA often provides the planning and order management layer, while detailed shop floor execution, data collection, and electronic batch records are handled by MES or other Level 2/3 systems, then synchronized back to S/4HANA.

    Common integrations in manufacturing

    In a plant environment, SAP S/4HANA is frequently integrated with:

    • MES / MOM systems to exchange production orders, confirmations, material consumption, and genealogy data.
    • Plant historians and OT data platforms to support quality records, traceability, and cost reporting.
    • Warehouse management and logistics systems for inventory movements, picking, shipping, and receiving.
    • Quality and LIMS systems for test results, COAs, and release decisions that affect material status in S/4HANA.

    The exact division of responsibilities between S/4HANA and plant systems depends on architecture, regulatory strategy, and validation and change-control requirements.

    What SAP S/4HANA is not

    • It is not a traditional MES. While it manages production orders and confirmations, it does not typically handle detailed work instructions, operator guidance, complex routing logic at the machine level, or rich real-time OEE and line performance visualization.
    • It is not a SCADA or DCS. It does not interface directly with PLCs for real-time control.
    • It is not limited to manufacturing. It is used across industries for enterprise-wide business processes.

    Common confusion

    SAP S/4HANA is sometimes conflated with other SAP manufacturing products:

    • SAP S/4HANA vs SAP MII / SAP Digital Manufacturing: S/4HANA provides ERP and high-level planning. SAP MII and SAP Digital Manufacturing (including SAP Digital Manufacturing for Execution) provide manufacturing operations and integration capabilities closer to the shop floor.
    • SAP S/4HANA vs SAP ECC: ECC is the earlier generation of SAP ERP. S/4HANA is the newer suite built specifically for the HANA database, with a different data model and user interface.

    Context from MES discussions

    In discussions about whether SAP is an MES, SAP S/4HANA is typically positioned as the ERP backbone that coexists with one or more MES or Level 2/3 systems in brownfield and regulated plants. S/4HANA usually owns planning, master data, and commercial records, while MES owns detailed execution, operator interaction, and many real-time records required on the shop floor.