RSC Colour: Gray 600

  • virtualization

    Virtualization is the abstraction of physical computing resources into logical instances so that multiple isolated workloads can run on the same underlying hardware. It is commonly implemented through a hypervisor that creates and manages virtual machines (VMs), each with its own operating system and applications, sharing CPU, memory, storage, and network interfaces.

    Key characteristics

    In industrial and manufacturing environments, virtualization commonly refers to:

    • Server virtualization: Running multiple virtual servers (for MES, historians, batch systems, engineering workstations, or domain controllers) on a single physical host or host cluster.
    • Desktop or application virtualization: Providing operator stations, engineering clients, or specialized tools as virtual desktops or remote applications instead of dedicated PCs.
    • Network and security virtualization: Using virtual firewalls, routers, and network segments to separate OT and IT traffic or isolate zones and conduits defined by security standards.
    • Storage virtualization: Presenting pooled or abstracted storage resources to hosts as logical disks or volumes.

    Virtualization does not change the logical functions of applications or operating systems; it changes how and where they are hosted and how resources are allocated and isolated.

    Operational meaning in regulated and industrial environments

    In regulated or security-sensitive manufacturing environments, virtualization is used to:

    • Host OT and IT workloads with defined separation and controlled resource sharing.
    • Segment systems into different security zones by running separate virtual machines, each mapped to specific network segments and security policies.
    • Support lifecycle management tasks such as snapshots, backups, test environments, and disaster recovery scenarios.
    • Maintain legacy operating systems or applications on modern hardware by encapsulating them inside VMs.

    From an operational perspective, virtualization introduces additional layers to document and manage: the physical host infrastructure, the hypervisor, and each virtual machine or virtual network component. In regulated environments, changes, configurations, and access controls at each layer typically need clear governance and traceability.

    Relation to security zoning (e.g., IEC 62443)

    When applying security zoning concepts, such as those in IEC 62443, virtualization allows a single physical device to host multiple logical entities (for example, several virtual machines or virtual network interfaces) that belong to different zones. Each virtual instance can be assigned:

    • Its own security policies and firewall rules.
    • Separate network interfaces or VLANs mapped to defined conduits.
    • Distinct user and role configurations aligned with zone-specific requirements.

    This approach requires careful architectural design, clear documentation of which virtual components belong to which zones, and strong enforcement of isolation at the hypervisor and network levels to avoid ambiguous trust boundaries.

    Common confusion

    • Virtualization vs. containerization: Virtualization typically provides full virtual machines with their own operating systems. Containerization shares a single OS kernel and isolates applications at the process level. Both can appear similar from an application perspective, but they have different isolation and management models.
    • Virtualization vs. cloud computing: Cloud services are often built on virtualization, but virtualization itself is the underlying technology for abstracting hardware. It can be used on-premises without any public cloud components.
    • Virtual machines vs. physical segmentation: Virtual separation on a single host is not the same as physically distinct hardware. Security or availability requirements may still call for physical separation even when virtualization is used.
  • expiry

    Meaning in industrial and regulated environments

    Expiry commonly refers to a specific point in time after which something is considered no longer valid, usable, or compliant. In industrial and regulated manufacturing, the term is most often applied to:

    – **Materials and products**: the date or time after which a raw material, intermediate, or finished good must not be used or shipped.
    – **Authorizations and records**: the point after which a document, training, or temporary access right is no longer valid and must be renewed or reapproved.

    In all cases, expiry is defined by internal specifications, customer requirements, or external regulations, and is typically captured as a discrete field (for example, expiry date or expiration timestamp) in manufacturing and quality systems.

    Use in manufacturing systems and workflows

    In operations and manufacturing IT/OT systems, expiry is usually managed as a data attribute that drives system behavior:

    – **ERP/MES**: expiry dates on lots, batches, serial numbers, or stock items are used to prevent issue, consumption, or shipment after the expiry point.
    – **QMS/LIMS**: test results, stability studies, and certificates may define or update a material’s expiry; QMS workflows enforce holds or re-inspection when expiry is reached or approached.
    – **Labeling and traceability**: expiry data is printed on labels and encoded in barcodes or RFID to support traceability and ensure only in-date materials are used.
    – **Access and training systems**: user roles, training records, and qualifications can have expiry, controlling which tasks an operator is allowed to perform.

    Operationally, expiry is treated as a constraint: systems often block or warn on transactions that would consume or move expired items, and reports highlight quantities at or beyond expiry for review and disposition.

    Boundaries and exclusions

    In this site context, **expiry** generally includes:

    – Time limits on the **use or validity** of materials, products, documents, or authorizations.
    – Explicit dates, times, or periods (for example, shelf life leading to an expiry date).
    – System rules and checks that enforce those time limits.

    It generally **does not refer to**:

    – Commercial contract expiration (for example, end of a service subscription), except where it directly constrains manufacturing operations.
    – Software license expiry in a purely IT procurement sense, unless it is directly modeled as an operational constraint in OT/IT systems.

    Common confusion and terminology

    Several related terms are often used alongside or instead of “expiry”:

    – **Expiration date / expiry date**: the specific calendar date after which the item or authorization is considered expired. In practice, these are interchangeable with “expiry” in many plants.
    – **Shelf life**: the defined period during which a material or product is expected to remain within specification when stored under stated conditions; expiry occurs at the end of the shelf life.
    – **Best before / use by**: consumer-facing terms; in regulated industrial settings, the internal system usually still tracks a formal expiry date even if labels use different phrasing.

    It is also useful to distinguish **expiry** from:

    – **Obsolescence**: when a product, material, or document is deliberately replaced or withdrawn for business or technical reasons, not necessarily because of time-based degradation.
    – **Hold or quarantine**: a temporary restriction on use that may or may not be related to expiry.

    Site context: expiry in waste and performance metrics

    When measuring material waste or yield in manufacturing, expiry is often treated as a specific waste category:

    – **Expired stock**: inventory that has reached its expiry date and cannot be used in production or shipped, typically counted as scrap or write-off.
    – **Expiry-related KPIs**: some plants track metrics such as cost of expired materials, percentage of inventory lost to expiry, or volume of product reworked or discarded due to nearing expiry.

    In integrated MES/ERP/QMS environments, expiry information can therefore influence planning, scheduling, and inventory strategies, as well as reportable waste and quality indicators.

  • shop floor

    Core meaning

    In industrial and manufacturing contexts, **shop floor** refers to the physical area in a plant or facility where production work is executed. It is where operators, machines, materials, and work-in-progress (WIP) come together to perform value-adding activities such as processing, assembly, packaging, and inspection.

    The term commonly includes:

    – Production lines and workstations
    – Process equipment (e.g., reactors, fillers, presses, CNC machines)
    – Local control panels and operator terminals (HMIs)
    – Material staging, WIP storage, and in-process inspection points
    – Areas where operators record production and quality data

    It usually excludes offices, engineering spaces, and purely administrative or corporate areas, even when they are located inside the same building.

    Use in operations and systems

    In regulated and integrated manufacturing environments, the shop floor is a central reference point for both OT and IT systems:

    – **MES and shop floor**: A Manufacturing Execution System (MES) coordinates and records work as it happens on the shop floor, including order execution, equipment status, material consumption, and quality checks.
    – **OT systems**: PLCs, DCS, SCADA, and local HMIs control and monitor equipment directly on the shop floor.
    – **IT/enterprise systems**: ERP, LIMS, and quality systems consume or supply data about what is happening on the shop floor, such as order status, test results, or material movements.

    In daily language, phrases like *“shop-floor execution,”* *“shop-floor data collection,”* or *“shop-floor visibility”* refer to how accurately and timely the state of real production activities is known and represented in systems.

    Boundaries and exclusions

    Within manufacturing, **shop floor**:

    – **Includes**: Any area where scheduled production, in-process handling, and related quality or maintenance tasks are performed on the product or equipment.
    – **May or may not include**: Warehousing, maintenance workshops, or laboratories, depending on the plant layout and local usage.
    – **Excludes**: Purely administrative, commercial, or corporate IT environments (often referred to as the “office” or “back office”).

    In some sectors, similar concepts are expressed as *production area*, *manufacturing floor*, or *operations floor*. In process industries, the term may extend to control rooms closely tied to production but still emphasizes the physical production environment.

    Common confusion and related terms

    – **Shop floor vs. plant or site**: The plant/site is the entire facility; the shop floor is the subset where production work is executed.
    – **Shop floor vs. back office**: The shop floor is tied to physical production; back office covers planning, finance, HR, and administrative tasks.
    – **Shop floor vs. field operations**: In some industries, *field* refers to off-site operations (e.g., upstream assets). *Shop floor* is typically on-site within a plant or factory.

    When discussing software, *shop-floor system* usually means systems that are directly used by operators in production areas, often with industrial interfaces and integration to equipment.

    Site context: manual status reporting and MES

    In the context of MES and status reporting, **shop floor** is the environment where:

    – Operators interact with equipment, paper documents, or terminals to record production status.
    – MES, SCADA, or other systems attempt to capture real-time data on order progress, equipment states, and quality checks.
    – Manual status reporting (e.g., confirming step completion, entering counts or test results) often remains necessary due to legacy equipment, partial integration, or validation constraints.

    Discussions about *eliminating manual status reporting* focus on how completely digital systems can represent the true state of the shop floor without relying on manual confirmation from operators.

  • autoclave

    Core meaning

    In industrial and regulated manufacturing environments, an **autoclave** is a sealed pressure vessel used to run tightly controlled thermal and pressure cycles on materials, parts, or products. It allows processing at temperatures above the normal boiling point of water by applying elevated pressure, enabling specific physical or chemical changes.

    Typical controlled parameters include:

    – Temperature profile (ramps, soaks, cool-down)
    – Internal pressure (gas, steam, or vacuum differential)
    – Cycle time
    – Atmosphere (e.g., steam, nitrogen, air)
    – Vacuum on parts or tooling (for some processes)

    Autoclaves are treated as special-process equipment in many regulated industries because product quality cannot be fully verified by end-of-line inspection alone and instead depends on adherence to the validated cycle.

    Common industrial uses

    In manufacturing and industrial operations, autoclaves commonly support:

    – **Composite curing**: Curing fiber-reinforced polymer components (e.g., aerospace structures) under controlled heat, pressure, and vacuum to achieve required mechanical properties.
    – **Bonding and laminating**: Bonding multi-layer assemblies or honeycomb structures where pressure and heat must be applied uniformly.
    – **Vulcanization or rubber processing**: Curing elastomeric parts under controlled temperature and pressure.
    – **Sterilization**: Sterilizing tools, containers, or materials (e.g., in medical device and some pharma-related operations) using saturated steam at elevated pressure.
    – **Material conditioning**: Stress relief or other heat/pressure treatments where a sealed environment is required.

    The exact use depends on the industry, but in all cases the autoclave is used when uniform, repeatable heat and pressure conditions are critical to product performance or regulatory compliance.

    Operational characteristics and controls

    In production environments, an autoclave is typically integrated into broader OT/IT and quality systems. Common operational characteristics include:

    – **Recipe-driven operation**: Cycles are run according to predefined, approved recipes specifying temperatures, pressures, ramps, holds, and alarms.
    – **Sensor coverage**: Multiple thermocouples and pressure sensors monitor chamber conditions and sometimes part-level conditions.
    – **Equipment interlocks**: Controls that prevent door opening under unsafe pressure or temperature, or starting a cycle without required conditions (e.g., vacuum established, load configuration verified).
    – **Data acquisition and records**: Continuous recording of key parameters (e.g., every few seconds) for batch records, investigations, and regulatory review.

    When connected to MES or other manufacturing systems, autoclaves are often managed as special-process resources where:

    – Lots or serials are tracked into and out of each cycle.
    – Only approved recipes are selectable for a given part or specification.
    – Deviations (e.g., out-of-band temperature) are automatically flagged in electronic records.

    Boundaries and exclusions

    In this site context, “autoclave” generally **includes**:

    – Industrial composite-curing autoclaves
    – Production sterilization autoclaves used in manufacturing flows
    – Pressure vessels with integrated controls designed for validated thermal/pressure processes

    It generally **excludes**:

    – Simple ovens or furnaces without pressurization capability
    – Pressure vessels used only for storage or transport (no controlled thermal cycles)
    – Informal laboratory pressure cookers without process control or data logging

    Common confusion and related terms

    Autoclaves are sometimes confused with:

    – **Ovens**: Ovens control temperature but typically operate at near-atmospheric pressure. Autoclaves uniquely combine controlled pressure with temperature.
    – **Retorts**: In food processing, the term “retort” is often used for equipment functionally similar to an autoclave; in other sectors, “autoclave” is the more common term.
    – **Pressure cookers**: Domestic or small lab devices that work on a similar principle (pressure + heat) but lack the industrial control, scale, and record-keeping associated with production autoclaves.

    When discussing regulated manufacturing processes, using the term **autoclave** usually implies industrial-scale equipment with validated recipes, instrumentation, and traceable records rather than household or improvised pressure vessels.

    Site context: aerospace and special processes

    In aerospace and other highly regulated sectors, autoclaves are frequently classified as **special process equipment**:

    – Composite parts, bonded structures, or other critical components are cured in autoclaves following tightly specified process parameters.
    – MES, SCADA, or other OT/IT systems are often integrated to manage recipes, capture detailed process histories, and link cycles to specific parts, lots, or work orders.
    – Audit and certification activities typically review autoclave process data, operator actions, and recipe management controls to confirm that required conditions were achieved.

    In this context, “autoclave control” typically refers to both real-time equipment control (via PLC/SCADA or similar) and higher-level coordination by MES or quality systems that ensure correct recipes are used and that complete, tamper-evident electronic records are retained.

  • requirements

    Requirements are documented needs, obligations, or expectations that specify what a system, product, process, or organization must achieve or comply with. In industrial and regulated manufacturing environments, requirements are the formal basis for design, production, quality control, and compliance activities.

    What requirements typically include

    In manufacturing and industrial operations, requirements commonly refer to:

    • Technical and product requirements: Specifications, drawings, tolerances, materials, performance criteria, and functional characteristics that a product or component must meet.
    • Process and procedural requirements: Defined steps, methods, parameters, and controls for how work is performed (for example, standard operating procedures, work instructions, process recipes).
    • Regulatory and standards requirements: Applicable laws, regulations, and external standards that must be met (for example, industry standards, safety codes, or quality management requirements).
    • Customer and contract requirements: Commitments agreed in contracts, purchase orders, statements of work, or customer-specific specifications.
    • System and software requirements: Functional and non-functional needs for MES, ERP, SCADA, or other OT/IT systems that support operations.

    Requirements are usually traceable documents or records. They are referenced throughout the lifecycle, from design and planning through production, inspection, release, and change control.

    Operational role of requirements

    In day-to-day operations, requirements commonly serve to:

    • Define criteria for acceptance or rejection of materials, components, and finished goods.
    • Provide the reference point for inspections, tests, and in-process checks.
    • Guide how work instructions and recipes are authored and updated.
    • Support traceability from customer or regulatory expectations down to plant-floor actions.
    • Enable impact analysis when changes are proposed to products, processes, or systems.

    Relationship to nonconformities

    A nonconformity is typically defined relative to requirements. An issue is considered a nonconformity when there is objective evidence that an established requirement has not been met. Without a clear, documented requirement, it is more difficult to classify a deviation as a formal nonconformity.

    Common confusion

    • Requirements vs. specifications: A specification is a detailed form of requirement, often focused on measurable technical or process criteria. “Requirement” is the broader term and can include specifications, procedures, and contractual or regulatory obligations.
    • Requirements vs. design: Requirements state what needs to be achieved, while design describes how those requirements will be met. Mixing the two can reduce clarity, especially for traceability and change control.
    • Requirements vs. policies: Policies are high-level organizational rules or intentions. Requirements are more specific and actionable, and are often directly testable or verifiable.

    Requirements in OT/IT and MES contexts

    For manufacturing IT and OT systems, requirements commonly cover data capture, traceability, system interfaces, security controls, and support for regulatory records. Functional and non-functional system requirements guide configuration and validation of MES, ERP, LIMS, and related systems that support compliant operations.

  • edition

    An edition is a specific formally published version of a standard, specification, or controlled document. Each edition has its own publication date and often an edition number, and it represents the complete, authoritative text at that point in time.

    What an edition includes

    In industrial and regulated environments, an edition commonly refers to:

    • A full, consolidated version of a standard (for example, IEC, ISO, or industry consortium documents).
    • All approved content up to that publication date, including any previously incorporated amendments or corrigenda.
    • A stable reference that can be cited in contracts, procedures, validation documents, and design records.

    An edition is typically identified by a combination of:

    • Edition number (for example, Edition 1.0, Edition 2.0).
    • Publication year.
    • Part number or section of a multi-part standard (for example, IEC 62443-3-3 Edition 1.0).

    How an edition differs from revisions and amendments

    Although usage can vary, in standards and document control contexts:

    • Edition usually means a complete, formally republished document.
    • Amendment means a targeted set of changes that update or add to a specific edition without replacing the whole document.
    • Revision is a generic term for changes and may result in a new edition when the standard is republished in full.

    For internal company procedures, some organizations use “edition” as a high-level version label and use separate minor version or revision identifiers for smaller updates. Others reserve the term primarily for external consensus standards.

    Operational use in manufacturing and compliance

    Tracking editions is important where design, validation, and cybersecurity requirements rely on specific external standards or controlled specifications. Typical uses include:

    • Document control systems storing the applicable edition of a standard that a process, equipment design, or validation protocol is based on.
    • Change control workflows that evaluate the impact of moving from one edition of a standard to a later one.
    • Supplier and customer agreements that refer to a particular edition to avoid ambiguity about technical or security requirements.
    • Regulated or long-lifecycle plants documenting which edition of cybersecurity or safety standards their systems were designed or assessed against.

    Common confusion

    • Edition vs version: “Version” is a broad term used for almost any change level in software, specifications, or work instructions. “Edition” usually refers to a formal, published, and named state of a standard or controlled document.
    • Edition vs release: “Release” often describes the act of making a document, product, or software version available. The item that is released may be a particular edition of a standard or a particular version of a document.

    Connection to external standards

    For multi-part industrial standards such as IEC 62443, each part is published in numbered editions. Organizations typically reference the exact part and edition when defining cybersecurity requirements, performing risk assessments, or documenting compliance-related activities, and they may evaluate new editions through formal change control before adopting them.

  • metadata

    Metadata is structured information that describes other data so that it can be understood, searched, governed, and used consistently across systems. In industrial and manufacturing environments, metadata commonly documents what a data item means, where it comes from, how it is calculated, how it should be used, and under what conditions.

    What metadata typically includes

    In operations and regulated manufacturing systems, metadata commonly covers:

    • Business meaning: clear definitions of fields, metrics, and codes (for example, what a specific KPI, status code, or material attribute represents).
    • Technical details: data types, units of measure, value ranges, and data models or schema relationships.
    • Provenance and lineage: data source systems, interfaces, transformation logic, and calculation formulas.
    • Governance information: ownership, version history, approval status, effective dates, and change-control references.
    • Access and usage rules: security classification, role-based visibility, and any regulatory or record-retention constraints.

    Metadata can be stored in many places, such as data catalogs, MES or ERP configuration tables, master data systems, data warehouses, and reporting tools. In dashboards and reports, it often surfaces as tooltips, field descriptions, or help text tied to specific metrics or columns.

    Operational role in manufacturing and KPIs

    For manufacturing KPIs and regulated operations, metadata provides the controlled definitions and context that help different plants, lines, and systems interpret data the same way. Examples include:

    • A standardized OEE definition with its calculation formula, included and excluded loss categories, and data sources for each component.
    • Controlled naming and descriptions for quality attributes, defect codes, and nonconformance types used across MES, LIMS, and QMS.
    • Versioned descriptions of inspection plans, sampling schemes, and test limits referenced by digital records.

    When dashboards or reports display metadata directly at the point of use (for example, via governed tooltips), users can see the current, approved definition of a KPI or field without leaving the application.

    Metadata and governance

    In regulated environments, metadata is often subject to document control and change management. This can include:

    • Versioning definitions and calculation rules, with effective dates and approvals.
    • Tracking which systems, reports, and interfaces consume a given piece of metadata.
    • Maintaining audit trails when definitions or mappings are updated.

    Consistent metadata helps support traceability, audit readiness, and alignment across OT and IT systems by making data meaning and usage explicit rather than implicit or tribal knowledge.

    Common confusion

    • Metadata vs. master data: Master data represents core business entities (such as materials, equipment, or customers). Metadata describes data elements themselves (for example, the meaning and structure of a “material grade” field), not the individual records.
    • Metadata vs. documentation: General documentation can be unstructured text. Metadata is structured, machine-readable information attached to specific data elements, fields, or objects, which systems can query and enforce.
  • design authority

    A design authority is the organization or formally appointed role that has legal, technical, and procedural responsibility for a product’s design. It controls the approved design definition, decides what constitutes a conforming or nonconforming condition, and authorizes any changes or deviations from the baseline design.

    Scope and responsibilities

    In industrial and regulated manufacturing environments, the design authority commonly:

    • Owns the baseline design, including drawings, models, specifications, and bills of material
    • Defines acceptance criteria and tolerances that production and quality must apply
    • Reviews and approves design changes through formal change control processes
    • Assesses nonconformances and determines whether rework, repair, or use-as-is is acceptable
    • Issues and approves deviations, waivers, and concessions to allow controlled departure from the design
    • Maintains configuration control and traceability of design revisions

    The design authority may be an internal engineering organization, a specific engineering role, or an external customer or type certificate holder, depending on contracts and regulatory frameworks.

    Operational meaning in manufacturing systems

    Within MES, PLM, ERP, and quality systems, the design authority is the reference owner of:

    • Released design data linked to routings, work instructions, and inspection plans
    • Approval steps for engineering change notices and configuration updates
    • Dispositions for nonconforming material that require design approval, such as repairs or concessions

    Workflow configurations often model the design authority as an approver or sign-off step for changes affecting form, fit, function, safety, or regulatory compliance.

    Use in aerospace and other regulated sectors

    In aerospace and similar highly regulated industries, the design authority commonly:

    • Holds design approval from the aviation or relevant regulatory body
    • Determines whether proposed repairs or rework restore full conformity to the approved design
    • Approves concessions or deviations when a part does not fully meet the design but may still be accepted under controlled conditions

    Production, maintenance, and quality functions typically cannot independently change or override design requirements without documented approval from the design authority.

    Common confusion

    The term “design authority” is sometimes confused with:

    • Manufacturing authority: responsible for how the product is built, not for the design definition itself.
    • Regulatory authority: the external agency that grants approvals; it may recognize a design authority but is not the same entity.

    In many organizations, the design authority collaborates with manufacturing and quality but retains final say on what the official design is and which deviations are technically acceptable.

    Link to the source context

    In the context of scrap, rework, repair, and concession, the design authority is the body that decides whether a nonconformance can be corrected to meet the original design, repaired under an approved method, or accepted via a concession or deviation, and ensures that these decisions are documented and traceable.

  • amendment

    An amendment is a formally approved, limited change to an existing document, standard, specification, or controlled record that does not replace the entire document. It typically adds, clarifies, or corrects specific clauses, sections, figures, or annexes while leaving the base edition in force.

    How amendments are used in regulated and industrial contexts

    In manufacturing and other regulated environments, amendments commonly apply to:

    • International and industry standards (for example, cybersecurity, safety, or quality standards)
    • Internal procedures, work instructions, and SOPs controlled by a document management process
    • Technical specifications and design documents shared across plants or with suppliers

    An amendment is typically identified by linking it to a specific base document and edition (for example, a particular part of a standard and its publication year). Organizations track which amendments are in effect, assess their impact, and decide if and when to adopt them through change control, validation, and training workflows.

    Amendment vs. revision

    • Amendment: A targeted update to selected portions of a document. The base edition remains valid and is read together with the amendment.
    • Revision: A full new edition that consolidates previous text and usually incorporates earlier amendments, often replacing the prior edition.

    In practice, a document may go through several amendments before a full revision is issued.

    Common confusion

    • Amendment vs. addendum: An addendum adds extra content (for example, an additional annex or example) without changing existing clauses, while an amendment can change existing text.
    • Amendment vs. correction/erratum: Corrections or errata usually address minor errors such as typos or misprints. Amendments typically reflect more substantive technical, procedural, or compliance-relevant changes.

    Link to standards work (for example, IEC 62443)

    Standards such as IEC 62443 may receive amendments when committees update specific requirements in response to technology shifts, new threat information, or industry feedback. Each amendment is published as a separate, traceable document that references the base part and edition. Operators and integrators then decide how to incorporate these changes into their cybersecurity, validation, and document control processes.