{"id":23052,"date":"2020-02-04T10:47:52","date_gmt":"2020-02-04T09:47:52","guid":{"rendered":"https:\/\/www.weyer-gruppe.com\/cyber-security-in-plant-security\/"},"modified":"2026-04-10T12:31:49","modified_gmt":"2026-04-10T10:31:49","slug":"cyber-security-in-plant-security","status":"publish","type":"page","link":"https:\/\/www.weyer-gruppe.com\/en\/plant-operators-and-investors\/cyber-security-in-plant-security\/","title":{"rendered":"Cyber security of production facilities"},"content":{"rendered":"
[vc_row][vc_column][vc_column_text]IT and the networking of a wide variety of systems with each other – the Internet of Things – is one of the central topics of our time – not only from a developer’s point of view, but also with regard to IT security or the cyber security of production facilities. However, in addition to the many positive effects of the new achievements in digitalisation, the negative developments are also becoming clearer: hacker attacks on networked systems are occurring again and again, so that the legislator has now also included cyber security in some laws relevant to operators and manufacturers.[\/vc_column_text][\/vc_column][\/vc_row][vc_row][vc_column width=”2\/3″ css=”.vc_custom_1597240098976{padding-right: 20px !important;}”][vc_empty_space height=”16px”]

Overview of the legal basis for the analysis<\/span><\/h3>[vc_column_text]A variety of guidelines and recommendations can be consulted as a legal basis for analysing the cyber security of a production facility, machine or production site. In the following, we present those approaches that we frequently use in our work.[\/vc_column_text][vc_tta_accordion c_icon=”” active_section=”” collapsible_all=”true”][vc_tta_section i_icon_fontawesome=”fas fa-exclamation-triangle” add_icon=”true” title=”Major Accidents Ordinance \/ 12th BImSchV” tab_id=”1595835511822-dbf009c1-f740″][vc_column_text]For operational areas that fall under the Hazardous Incident Ordinance, \u00a7 3 (General Operator Obligations) of the 12th BImSchV<\/a> also requires a consideration of IT security. The focus here is on process control and instrumentation and control equipment. The environmental administrations of the individual federal states are responsible for implementation. For NRW, the LANUV<\/a>has specified the requirements for the presentation of IT security in the safety report and in the licensing documents for plant safety in an orientation paper<\/a>.<\/p>\n

It can be assumed that authorities in NRW will from now on use the orientation paper as a template when assessing safety reports and licensing documents. The orientation paper explicitly mentions the following topics that must be presented in the safety report:<\/p>\n