A configuration management device configured to control an automated system comprising a plurality of network components and a control manager that manages the plurality of network components, the configuration management device comprising: a communications interface configured to communicate with the plurality of network components and with the control manager; and processing circuitry operatively connected to the communications interface and configured to: detect whether a discrepancy exists in configuration data received by the communications interface from a network component based on a comparison of the configuration data with reference configuration data stored in a database; responsive to detecting that a discrepancy exists in the configuration data, send a first tamper detection signal to the control manager indicating that the network component has been tampered with; and responsive to detecting that no discrepancy exists in the configuration data: monitor characteristics of data sent by the network component to the control manager while the network components are in an operational mode; detect whether a discrepancy exists in the characteristics based on a comparison to reference characteristics stored in the database; and responsive to detecting that a discrepancy exists in the characteristics, send a second tamper detection signal to the control manager indicating that the network component has been tampered with; wherein the first or second tamper detection signal sent by the processing circuitry is configured to cause the control manager to switch from communicating with the network component to communicating with a redundant network component. a communications interface configured to communicate with the plurality of network components and with the control manager; and processing circuitry operatively connected to the communications interface and configured to: detect whether a discrepancy exists in configuration data received by the communications interface from a network component based on a comparison of the configuration data with reference configuration data stored in a database; responsive to detecting that a discrepancy exists in the configuration data, send a first tamper detection signal to the control manager indicating that the network component has been tampered with; and responsive to detecting that no discrepancy exists in the configuration data: monitor characteristics of data sent by the network component to the control manager while the network components are in an operational mode; detect whether a discrepancy exists in the characteristics based on a comparison to reference characteristics stored in the database; and responsive to detecting that a discrepancy exists in the characteristics, send a second tamper detection signal to the control manager indicating that the network component has been tampered with; detect whether a discrepancy exists in configuration data received by the communications interface from a network component based on a comparison of the configuration data with reference configuration data stored in a database; responsive to detecting that a discrepancy exists in the configuration data, send a first tamper detection signal to the control manager indicating that the network component has been tampered with; and responsive to detecting that no discrepancy exists in the configuration data: monitor characteristics of data sent by the network component to the control manager while the network components are in an operational mode; detect whether a discrepancy exists in the characteristics based on a comparison to reference characteristics stored in the database; and responsive to detecting that a discrepancy exists in the characteristics, send a second tamper detection signal to the control manager indicating that the network component has been tampered with; monitor characteristics of data sent by the network component to the control manager while the network components are in an operational mode; detect whether a discrepancy exists in the characteristics based on a comparison to reference characteristics stored in the database; and responsive to detecting that a discrepancy exists in the characteristics, send a second tamper detection signal to the control manager indicating that the network component has been tampered with; wherein the first or second tamper detection signal sent by the processing circuitry is configured to cause the control manager to switch from communicating with the network component to communicating with a redundant network component.