Distributed control system configurations

Identifies substantive distributed-control-system configuration records. Topic phrases are retained for discovery; enforcement requires controller, module, I/O, tag, alarm, or control-loop configuration content, and high confidence also requires a deployable tag, value, node, rack, or site reference.

Type: regex
Engine: boost_regex
Confidence: medium
Confidence justification: Medium confidence requires configuration objects rather than a product or architecture mention. High confidence adds a deployable tag/value, node, rack, controller, or site reference.
Detection quality: Topic false positive
Jurisdictions: global
Regulations: GDPR, AML/CTF Act (Cth), HRIPA (Cth), IPA 2009 (Qld), My Health Records Act 2012 (Cth), NDB Scheme (Cth), Privacy Act 1988 (Cth), TIA Act 1979 (Cth)
Data categories: security
Scope: wide
Risk rating: 9
Platform compatibility: Purview: Compatible, GCP DLP: Compatible, Macie: Compatible, Zscaler: Compatible, Palo Alto: Degraded, Netskope: Unsupported

Pattern

(?is)\b(?:distributed\s+control\s+system|DCS\s+configuration|controller\s+configuration|Emerson\s+DeltaV|Honeywell\s+Experion|Yokogawa\s+CENTUM)\b

Corroborative evidence keywords

distributed control system configurations, distributed, control, system, configurations, critical, infrastructure, systems

Proximity: 300 characters

Should match

distributed control system configuration — Low-tier probe - DCS topic without configuration objects
DeltaV DCS configuration: control module, I/O point list, tag database, and alarm limit settings — Medium-tier probe - substantive configuration objects without live node/value detail
Production DeltaV DCS configuration for controller node DCS-CTRL-07: tag database entry TIC-204 setpoint SP=365, rack 2 slot 4 — High-tier probe - configuration content with live node, tag, value, and rack detail

Should not match

unrelated generic text without domain phrases — No relevant topic phrases present
placeholder value 12345 — Random text should not match topic-specific regex
distributed control system configuration — Bare topic phrase surfaces only in discovery
Vendor guide for Honeywell Experion distributed control system architecture — Vendor architecture prose without configuration objects
Training example: DeltaV DCS configuration tag TIC-204 SP=365 rack 2 slot 4 — Explicit training content must not enforce

Known false positives

Vendor manuals, architecture guides, and engineering courses discuss DCS products and controller concepts without exposing a live configuration. Mitigation: Require controller, module, I/O, tag, alarm, or control-loop configuration content before enforcement.
Labs and training examples can include realistic tags, values, rack/slot locations, and node names. Mitigation: Reject explicit template, demo, tutorial, sample-data, and training-example framing from enforcing tiers.

References

https://www.legislation.gov.au/C2018A00029/latest/text
https://www.cyber.gov.au/resources-business-and-government/essential-cyber-security/ism