The operational engine
All malfunctioning entities and operational incidents are tracked by the operational engine.
In the example shown in Figure 8.8, we can see that the operating mode has changed, indicating that the PLC is not secure:
Figure 8.8 – Example of an operational violation
This change in the state might constitute a protocol violation as well.