Topkapi information
Customised data acquisition with Topkapi
Discover the scriptable protocol, a Topkapi feature that enables data acquisition tailored to your needs.
Read more
Newsletter subscription
Cybersecurity: securing your Topkapi SCADA architecture
Key info
Cybersecurity is a major challenge for public and private operators. With the imminent transposition of the NIS 2 Directive into French law, more than 15,000 entities will have to comply on French territory. At AREAL, we have decided to provide you with concrete information to help you secure your Topkapi supervision architecture.
For several years now, AREAL has made cybersecurity a top priority. Why? Because the risks are very real: cyberattacks on infrastructure, widespread incidents, loss of critical data... The threats are multiplying.
AREAL: a strong commitment to cybersecurity
In 2014, AREAL joined the working group led by the French Cybersecurity Agency (ANSSI) to draft the target security model for SCADA systems. Since then, each new version of Topkapi has incorporated security enhancements, as demonstrated by the latest version 6.3, expected in autumn 2025.
Request the Topkapi 6.3 new features sheet >>
In February 2025, AREAL also obtained ISO 27001 certification, proof of its commitment to cybersecurity in both its operations and its industrial supervision solution. AREAL's teams are working hard to obtain CSPN (First Level Security Certification) certification for Topkapi.
An adaptable and secure SCADA architecture
To support its customers, AREAL offers a modular architecture that meets security requirements in line with operational needs. This type of architecture has already been deployed at certain customers who have successfully undergone compliance audits (PASSI) under NIS 1.
Here are some key principles to remember for a secure SCADA architecture with Topkapi:
- Separate functions: acquisition, operation, configuration.
- Isolate the core of the system (Topkapi server) with restricted access to the physical machine.
- Use secure protocols for data acquisition (e.g. OPC UA).
- Use supervision via a bounce client or web server located in the DMZ.
- Secure remote access via VPN or a PAM (Bastion) solution.
Request the diagram of the secure SCADA architecture based on Topkapi >>
