A setpoint is a configured target value that tells an industrial control system how to behave. In a water plant, it may define when a pump should start or stop, what pressure to maintain, or when an alarm should trigger. Operators set these values in controllers, SCADA screens, or HMIs so physical equipment follows the desired process.
Setpoints matter because changing them can alter real-world behavior without touching files or stealing data. An attacker who raises, lowers, or disables a setpoint can cause pumps to run at the wrong time, reduce safety margins, or hide abnormal conditions from operators. In OT incidents, this kind of tampering is often more damaging than a classic IT breach because it affects process integrity and service continuity. Defenders protect setpoints by limiting who can edit them, using strong authentication, logging changes, and comparing live values against approved baselines.