Towards Automated Risk Assessments for Modular Industrial Automation and Control Systems - State of the Art Survey and Information Model Proposal

The increasing availability of information, complexity of tasks, and demanded flexibility within the manufacturing automation domain enhances the necessity for new security engineering approaches. In contrast, the current standardisation landscape only offers static, manual, and resource-intensive procedures for the intrinsically mandatory risk assessments. The formalisation of security-related know-how into machine-readable information models will increase the overall automation degree of risk assessments. If the current risk assessment procedures are automated, the overall engineering performance can be increased in order to close the prevalent complexity gap.