Increased IT security by model-based vulnerability analysis of IT/I&C systems and proof of ISO conformity

This paper shows the extension of an entity model developed in cooperation with project partners by an “Organizational Entity” in order to detect potential weaknesses in IT security as well as to prove the standard conformity (IT security level according to IEC 62443) of the examined systems. This allows suitable security measures to be taken systematically and IT security to be optimized in the overall system. The first application of this progressive approach on a subsystem, the distillation, of the model factory ET of the University of Applied Sciences Magdeburg-Stendal is promising.