Skip to main content
Orion Five Engineering

10 Jalan Kilang #04-05, Singapore 159410
+65 6100 5505

Book a scoping call

Resources · Framework

The Orion Five Readiness Model

Five dimensions decide whether an integration will work on a live site. A critical weakness in any one of them can cause a project to fail, even if it is excellent on the other four. This pattern is common in failed projects. The model below sets out what each dimension measures, how it fails and what it costs to fix.

Five precision-turned steel discs of decreasing diameter stacked into a stepped tower, one disc in the middle visibly thinner than the rest, a red line running down the side and stepping where the thin disc interrupts it.
Takes
12 minute read
You get
The method, with the scoring bands and the remediation for each
Cost
Free, no sign-up

The premise

UNIT 01

Integration projects rarely fail because of their main technical task. The controller can be read, the model is accurate and the dashboard is correct, but the project still fails. The cause is often elsewhere. Nobody could agree which of three identifiers referred to the same pump. The engineering laptop that programs the line was also used for email. Or, eighteen months after go-live, the person who understood the system left and there was no budget to replace them.

Each of these problems belongs to a different dimension of readiness, and the dimensions are independent of each other. A site can be excellent on four dimensions and critically weak on the fifth. For this reason, the model does not average the scores.

We give every dimension equal weight

Weighting would assume that we can compare the cost of, for example, a flat network with the cost of having no process owner. We cannot, and nobody else can either. Each dimension has three questions and scores from 0 to 9. The maximum total is 45.

The weakest dimension sets the result band

Instead of weighting, the model prevents a high total from hiding a critical weakness. If one dimension scores at or below a third of its scale, the result is capped at pilot-ready, however high the total. If two dimensions do, the result is capped at not-ready. The total only decides your position within the band.

Projects with four strong dimensions and one critical weakness are often funded, delivered competently and then abandoned. A model that averaged the scores would give such a project a respectable 80% and call it ready.

The weakest dimension sets the result bandFive vertical bars showing a readiness profile: equipment accessibility eight out of nine, data foundation seven, network and security posture eight, process stability nine, and operating capacity two. A dashed line marks the fatal threshold at one third of the scale. Operating capacity falls below it. A note explains that the total of thirty-four out of forty-five would read as build-ready on its own, but the model caps the verdict at pilot-ready because a single fatal dimension sets the band.Critical thresholdEquipment8/9Data7/9Security8/9Process9/9Capacity2/9Total 34/45 (76%). Result: pilot-ready.
A total of 34 out of 45 is 76%, which on its own would mean build-ready. The model returns pilot-ready, because one dimension is critically weak and the other four cannot offset it.

Equipment accessibility

UNIT 02

Whether someone other than the installer can read data from the equipment and send it commands.

How it fails

The project is specified for the newest machine on site, but the cost is set by the oldest. The team then finds a machine whose controller is no longer supported, whose protocol needs a licence, or whose vendor refuses access. By that point, the scope is already signed. Teams often assume this dimension is fine, because checking it means opening a control panel.

What it costs to fix

A site survey. It takes two to five days for a typical SME site. The result is an inventory of the protocol each asset uses, who holds the credentials and what the OEM allows. A survey costs a small fraction of a build, and it is the only way to turn an estimate into a firm quote. If the vendor refuses access, the solution is non-invasive retrofit sensors. They cost more per asset, but they do not depend on the vendor.

What a full score looks like

Every asset in scope has a known interface, a documented address map, and credentials the company holds. No one outside the company needs to give permission.

Warning sign

"It should have Modbus, I think."

Data foundation

UNIT 03

Whether there is reliable data to integrate, and whether each physical item can be matched to a record in a system.

How it fails

The integration works, but nobody trusts the data. Two systems report different production counts, because they count different things and nobody has reconciled them. Or one physical asset has three identifiers, linked only by a spreadsheet that one person maintains. Staff then stop using the system. This looks like resistance to change, but it is a sensible response to unreliable data.

What it costs to fix

Fix identifiers first, then history. Agreeing on one identifier scheme and reconciling the existing ones is routine operations work. It usually takes a few weeks and needs no vendor. You cannot buy history. If no data has been kept, start collecting now. Any system that learns from patterns must then wait a year.

What a full score looks like

One identifier scheme, applied consistently, with each identifier linked to exactly one record. At least a year of timestamped history that can be retrieved. When the system and the physical count disagree, people check the physical count.

Warning sign

"You'd have to ask Sarah, she keeps the master list."

Network and security posture

UNIT 04

What becomes exposed when the operational network and the business network are connected.

How it fails

Security failures usually start in the business network, not with a direct attack on the plant. An ordinary ransomware infection reaches production because the two networks share user accounts or switches, or because a laptop moves between them. The integration project made the plant reachable, so it gets the blame, usually with good reason.

What it costs to fix

Network segmentation and a controlled route for outside access. On an SME site, this is often one hardened server and a set of firewall rules. The main cost is deciding the design and assigning an owner. Include it in the integration scope from the start. Added later, it becomes a change request. Left out, it can lead to a security incident.

What a full score looks like

The plant and business networks are separated, with one controlled crossing point. Vendor access goes through a broker and is recorded. One named person is explicitly responsible for operational security.

Warning sign

"It's all behind the firewall."

Process stability

UNIT 05

Whether the process you want to automate is stable enough to be worth automating.

How it fails

Automation locks in an unresolved disagreement. The process varies by shift or by person, and everyone believes their version is the standard. Automating one version makes the disagreement permanent and expensive to change. Or nobody measured the exception rate, which turns out to be a quarter of cases. Most of the promised saving is then still done by hand after go-live.

What it costs to fix

Agree the process before you automate it, and count the exceptions before you price the build. Both are operations tasks, not engineering, and both are cheap. Both cost far less than a change request against a signed scope. Two weeks spent counting exceptions gives the highest return of any task before an automation project.

What a full score looks like

The process is documented and followed as documented. Exceptions are under 5%, and each type is known. Two people doing the work produce the same result.

Warning sign

"Everyone does it slightly differently, but it works."

Operating capacity

UNIT 06

Who runs the system after handover, and what happens when it breaks.

How it fails

This failure happens after go-live, and nobody notices at first. The system works, the project closes and the integrator's support period ends. Eighteen months later, staff work around the system, because the person who understood it changed roles and nobody was funded to take over. The technical work was sound throughout. This is the most common failure in the model, and projects rarely plan for it.

What it costs to fix

A named owner, agreed by their manager, and an operating budget separate from the capital budget. Neither costs much, and no vendor can supply either. This is the only dimension where the solution is entirely internal, and for that reason organisations often postpone it.

What a full score looks like

A named person owns the system, and their job description says so. There is a recurring budget for licences, support and their time. The organisation has introduced a system before, and people still use it.

Warning sign

"We'll work out who owns it once it's live."

How to use the model

UNIT 07

Score your site before you ask vendors to quote

You can improve three of the five dimensions yourself, without a vendor: identity and history, process stability, and ownership. This work costs less as internal operations work than as change requests against a signed scope. It also improves the quotes you receive, because a vendor quoting for a stable process adds a smaller contingency.

Run the pilot on your weakest dimension

Most teams choose a pilot in the area most likely to succeed. That only produces a demonstration. Run the pilot where the model shows you are weakest, because that is the only area where the outcome is unknown. A pilot that fails there gives you information that a successful demonstration cannot.

Score your site again after go-live

Readiness declines over time. New equipment arrives with closed controllers, new connections appear across the network, and the owner of the last system takes on two more. Scoring the site once a year takes an hour and finds these problems while they are still cheap to fix.

The Integration Readiness Assessment applies this model as a scored questionnaire. It has fifteen questions, takes about six minutes and uses the weakest-dimension rule described on this page.

Technical references

UNIT 08

These are the sources for the reasoning on this page. We mark standards that you must pay to read. Where a free document covers the same subject better, we list it first.

Links open in a new tab, so you do not lose anything you have entered on this page. We checked every link when we built the page. If a link no longer works, please tell us and we will remove it.

Each of these tools is a short version of a conversation with one of our engineers. If your result raised a question you want to discuss, book a scoping call and bring your result with you.

More resources