Content
Kevin,
I don’t believe the additional security is necessary as what happened was an accident. I believe the time stamp log and popup confirmation will more than suffice shall this occur in the future.
Thank you,
![[20260407_19d6a53af181_image001.jpg]]
Mychal Jones
Plant Superintendent/Chief Plant Operator
Phone 805-489-6666 ext. 103
Web https://sslocsd.org/ Email mychal@sslocsd.us
1600 Aloha Place, Oceano, CA. 93445
From: Kevin Seifert <kevin@autosysnet.com>
Sent: Tuesday, April 7, 2026 3:59 PM
To: Mason Radke <mason@autosysnet.com>; Mychal Jones <mychal@sslocsd.us>; Mason Radke <mason.radke@gmail.com>; Mike Arias <arias@sslocsd.us>
Subject: Re: SCADA investigation
Copy.
Mychal,
Are there any other operator actions that you think we should log besides this Stop WAS? Or would you like us to look into a cost estimate to implement security and logging?
-Kevin Seifert, AutoSys LLC
________________________________
From: Mason Radke <mason@autosysnet.com<mailto:mason@autosysnet.com>>
Sent: Tuesday, April 7, 2026 3:57 PM
To: Kevin Seifert <kevin@autosysnet.com<mailto:kevin@autosysnet.com>>; Mychal Jones <mychal@sslocsd.us<mailto:mychal@sslocsd.us>>; Mason Radke <mason.radke@gmail.com<mailto:mason.radke@gmail.com>>; Mike Arias <arias@sslocsd.us<mailto:arias@sslocsd.us>>
Subject: Re: SCADA investigation
It’s not as straightforward as ignition but it’s possible. It would be a big job to implement security on this level but can be done.
Logging the bit in historian is the quickest way to monitor this button action.
Get Outlook for iOS<https://aka.ms/o0ukef>
________________________________
From: Kevin Seifert <kevin@autosysnet.com<mailto:kevin@autosysnet.com>>
Sent: Tuesday, April 7, 2026 3:48:52 PM
To: Mychal Jones <mychal@sslocsd.us<mailto:mychal@sslocsd.us>>; Mason Radke <mason@autosysnet.com<mailto:mason@autosysnet.com>>; Mason Radke <mason.radke@gmail.com<mailto:mason.radke@gmail.com>>; Mike Arias <arias@sslocsd.us<mailto:arias@sslocsd.us>>
Subject: Re: SCADA investigation
Mason,
Is there an event log in FactoryTalk for operator actions that, if we had individual login's would log actions such as clicking the WAS Stop button?
-Kevin Seifert, AutoSys LLC
________________________________
From: Mychal Jones <mychal@sslocsd.us<mailto:mychal@sslocsd.us>>
Sent: Tuesday, April 7, 2026 10:02 AM
To: Mason Radke <mason@autosysnet.com<mailto:mason@autosysnet.com>>; Mason Radke <mason.radke@gmail.com<mailto:mason.radke@gmail.com>>; Mike Arias <arias@sslocsd.us<mailto:arias@sslocsd.us>>
Cc: Kevin Seifert <kevin@autosysnet.com<mailto:kevin@autosysnet.com>>
Subject: RE: SCADA investigation
Thank you for the information, Mason.
Please proceed with implementing both of your proposed changes if possible.
Kind regards,
![[20260407_19d6a53af181_image001.jpg]]
Mychal Jones
Plant Superintendent/Chief Plant Operator
Phone 805-489-6666 ext. 103
Web https://sslocsd.org/ Email mychal@sslocsd.us<mailto:mychal@sslocsd.us>
1600 Aloha Place, Oceano, CA. 93445
From: Mason Radke <mason@autosysnet.com<mailto:mason@autosysnet.com>>
Sent: Tuesday, April 7, 2026 9:43 AM
To: Mason Radke <mason.radke@gmail.com<mailto:mason.radke@gmail.com>>; Mike Arias <arias@sslocsd.us<mailto:arias@sslocsd.us>>
Cc: Mychal Jones <mychal@sslocsd.us<mailto:mychal@sslocsd.us>>; Kevin Seifert <kevin@autosysnet.com<mailto:kevin@autosysnet.com>>
Subject: Re: SCADA investigation
WAS Pumping System — Unplanned Shutdown Summary
April 5, 2026
I looked into the unexpected WAS pumping shutdown that occurred at 11:58 AM on April 5. All trend values dropped at the exact same moment with no fault, interlock, or other automated condition that would explain it. The only alarm that fired was a low flow deviation on FIC4610, which was simply a result of the pumps stopping and not the cause. Based on everything we saw, the most likely explanation is that the SCADA Stop button was hit accidentally.
To prevent this from happening again, two small changes are proposed:
1. Log the Stop command — Every time the WAS Stop button is pressed, a timestamped entry will be recorded in the data log. This gives a clear record to reference if something like this comes up again.
2. Add a confirmation step — A popup confirmation will be added to the Stop button so operators have a chance to cancel before the shutdown executes. This makes an accidental press a non-issue.
Neither change requires any modifications to the PLC or field equipment. Please let me know if you would like me to spend time on this. I estimate 1-2 hours to get those changes implemented and tested.
Mason Radke
Autosys, LLC
From: Mason Radke <mason.radke@gmail.com<mailto:mason.radke@gmail.com>>
Date: Monday, April 6, 2026 at 2:05 PM
To: Mike Arias <arias@sslocsd.us<mailto:arias@sslocsd.us>>
Cc: Kevin Seifert <kseifert@nviro.com<mailto:kseifert@nviro.com>>, Mason Radke <mason@autosysnet.com<mailto:mason@autosysnet.com>>, Mychal Jones <mychal@sslocsd.us<mailto:mychal@sslocsd.us>>
Subject: Re: SCADA investigation
i can take a look this afternoon. i'll let you know if theres enough information logged to tell you for sure. would you like a confirmation pop up on that button? to help prevent it from being accidentally hit again?
On Mon, Apr 6, 2026 at 1:59 PM Mike Arias <arias@sslocsd.us<mailto:arias@sslocsd.us>> wrote:
Good Afternoon Gentlemen,
Yesterday, 4/5/26 at approximately 11:58am our WAS pump shut down. We think we know what happened but are wondering if either one of you could confirm this for us? We believe that an Operator may have hit the stop button for the WAS pump. From the Aeration screen/button to the Secondary Clarifier and WAS button, then to setpoints. We believe that when the Operator was entering the wasting gallons for the day that the WAS pump Stop button was inadvertently pressed. Any was that you could confirm this for us? Thank you.
Best regards,
Michael Arias
Michael J. Arias
Operations Supervisor
Grade III Operator
South San Luis Obispo County Sanitation District
1600 Aloha Place, Oceano, Ca.
805-489-6666
[South San Luis Obispo County Sanitation District]
--
-Mason