A plant control system includes at least one control apparatus, and an engineering apparatus for changing a security state of the control apparatus. The control apparatus includes: a security management part for accepting a security level change request downloaded from the engineering apparatus and changing a security level of the control apparatus by referring to a password held by the control apparatus; and a change permission part for permitting a change in the security level by the security management part.