A computer (often a PC) used by engineers to configure, program, and troubleshoot ICS devices like PLCs, DCS controllers, or RTUs. The EWS typically runs vendor-specific software (for example, PLC programming tools or HMI configuration suites) and is usually connected to the control network. Because it can change the behavior of the process (by downloading new logic or settings), an engineering workstation is a high-impact asset to secure – an attacker who compromises it could alter the process. It’s often only used by authorized control engineers and may sit in the control room or engineering office. To maintain compatibility with legacy equipment, it can be running obsolete Windows versions.
