On each scan cycle (0.1–10 ms), the PLC reads all digital and analogue input module values into a process image table; executes the user program (all rungs or function blocks in order); writes computed output values from the image table to output modules. I/O modules convert physical signals — digital inputs (24 VDC, 120/240 VAC), analogue inputs (4–20 mA, ±10 V, thermocouple, RTD), and digital/analogue outputs — to and from the CPU data register. Communication modules (Profibus DP/PA, EtherNet/IP, Modbus TCP, PROFINET) connect PLCs to field devices, operator panels, and higher-level systems. Redundant CPU and I/O options provide fault-tolerant operation for continuous process applications.
Challenges
Single Point of Failure in Non-Redundant PLC CPU Causing Total Plant Shutdown
CPU hardware or firmware fault stops all outputs — entire controlled process stops; potentially unsafe condition.
I/O Module Channel Failure Causing Undetected Measurement or Control Loss
Individual I/O channel fails silently — no alarm; process continues with wrong setpoint or missing measurement.
Scan Rate Too Slow for High-Speed Control Loops (e.g. Pressure Loop at >1 kHz)
Standard PLC scan 1–10 ms cannot close a 1 kHz pressure control loop — loop instability or no control at high speed.
Software Error in User Program Causing Unintended Output State
Logic error in user program causes an output to activate at wrong condition — equipment damage or safety incident.
Cybersecurity Vulnerability in Ethernet-Connected PLC (OT Network Attack)
Network-connected PLC without network segmentation is exposed to malware, ransomware, and targeted attack.
Solutions
- Redundant CPU (Primary + Hot-Standby, <50 ms Switchover): Hot-standby CPU mirrors all register states — bumpless switchover <50 ms; transparent to process and field devices.
- Self-Diagnostic I/O Modules (Channel-Level Fault Detection, HART Pass-Through): Smart I/O modules detect wire break, over-range, and short circuit per channel — alarm to SCADA on any channel fault.
- High-Speed I/O Modules (< 1 ms, Dedicated Motion/Pressure Control Module): Dedicated high-speed analogue I/O module scans at 1 kHz — closes fast pressure or tension control loops.
- Independent Software Review (4-Eyes Principle) + PLC Simulation Testing Before Commissioning: Independent review of all logic; full process simulation test with I/O simulation before live commissioning.
- Network Segmentation (DMZ between IT and OT), Firewall, No Direct Internet Connectivity: Industrial DMZ with stateful firewall between corporate IT and PLC network — OT network isolated from internet and corporate LAN.
Applications
- Machine Automation: Single machine or production cell control — packaging machines, conveyors, robots, filling lines.
- Batch Process: ISPE/ISA S88 batch control — PLC with batch manager for recipe-controlled pharmaceutical and food manufacturing.
- Utilities Control: Compressed air, HVAC, pumping station, steam system control — PLC with SCADA supervisory layer.
- Building Automation: BMS/BACS — HVAC, lighting, access control, fire suppression — BACnet or KNX communication.
- Safety (SIL-rated): Safety PLC (SIL 2/3 certified) for ESD, burner management, safety shutdown — IEC 61511 compliant.
PLC System Size Reference
PLC Systems — Size Reference and Capabilities | ||||||||
PLC Class | I/O Count (typical) | CPU Scan [ms] | Communication Protocols | Redundancy Option | Programming Standard | Max Analogue Channels | SIL Rating Available | Applications |
Micro PLC (nano) | 8–32 DI/DO; 2–4 AI/AO | 1–10 | Modbus RTU/TCP; Profibus DP | No | IEC 61131-3 | 4 AI, 2 AO | — | Single machine; small pump station; HVAC unit control |
Compact PLC (small) | 32–256 I/O | 0.5–5 | Modbus; EtherNet/IP; Profibus DP | No (or limited) | IEC 61131-3 | 8–16 AI/AO | SIL 1 option | Small plant; OEM machine; building automation; skid control |
Modular PLC (medium) | 256–2,048 I/O | 0.1–2 | EtherNet/IP; Profibus DP; PROFINET; DeviceNet | CPU redundancy option | IEC 61131-3; ISA S88 batch | Up to 256 AI/AO | SIL 2 option | Process plant; pharmaceutical; food; medium batch manufacturing |
Large modular PLC | 2,048–10,000+ I/O | 0.05–1 | PROFINET; EtherNet/IP; Profibus DP/PA; FOUNDATION Fieldbus; HART over Ethernet | Full CPU + I/O redundancy | IEC 61131-3; ISA S88 batch; ISA S95 MES | Up to 2,000 AI/AO | SIL 2/3 | Large process plant; refinery; power; chemical complex |
Safety PLC (SIL 2/3) | 32–4,000 safety I/O | <1 (safety critical) | PROFIsafe; Safety over EtherNet/IP | Dual/triple redundant (TMR) | IEC 61131-3 + IEC 61508/61511 | Up to 512 safety AI/AO | SIL 2/3 (IEC 61508/61511) | ESD; BMS; safety shutdown; fire and gas detection systems |
Soft PLC (PC-based) | Via I/O fieldbus (unlimited) | <0.1 ms (real-time OS) | All Ethernet-based + OPC UA | OS redundancy; RAID storage | IEC 61131-3; C/C++ extensions | Limited by I/O system | SIL 2 (CODESYS Safety) | Motion control; CNC; complex algorithm; Industry 4.0 integration |