Fraunhofer Institute for Applied and Integrated Security
Fraunhofer Institute for Applied and Integrated Security

IT security concepts: From orientation to implementation

As an independent research institute, Fraunhofer AISEC supports businesses in all areas of IT security. From preliminary orientation and detailed discussions to the actual implementation of projects.

Harnessing the full potential of new technologies with the »Industry 4.0 & IT Security Audit«

Fraunhofer AISEC teamed up with the Fraunhofer Institute for Production Technology IPT to develop the Industry 4.0 & IT Security Audit to help companies benefit from Industry 4.0 solutions and cyber-physical systems while making sure that IT Security is accounted for.

 

Achieving Industry 4.0 & IT Security readiness in seven steps

Industrial manufacturers follow the seven steps of the »Industry 4.0 & IT Security Audit«. Feel free to contact our experts for your migration to secure Industry 4.0 technologies.

Your audit journey starts with a site visit to perform the Quick Scan. Our team identifies the goals of your Industry 4.0 transition which lay the foundations for the audit. The Current State Analysis provides insights into the existing infrastructure and architecture in your business that can either be utilized or improved upon to reach your goals. Based on security risk assessments and additional analysis, we develop a company-specific roadmap to reach the envisioned Industry 4.0 and IT security level and propose appropriate security countermeasures to keep your business protected at all times. We assist with the implementation of the roadmap and help you acquire the skills to analyze the Industry 4.0 and cybersecurity readiness for future processes. Lastly, we perform an expert review of your Industry 4.0 and security processes.

Modular Risk Assessment (MoRA)

Expand all Close all

Risk Assessment in a Typical Development Process
© Fraunhofer AISEC
Risk Assessment in a Typical Development Process

The increasing complexity of networked systems and the diversity of hardware and software components require new system architectures, as well as methods and tools to systematically identify conceptual security vulnerabilities at an early stage and to take appropriate countermeasures.

Fraunhofer AISEC has supported various businesses in the development and integration of such methods. For example, we supported an automotive manufacturer in the development and establishment of the risk assessment method. After developing and establishing a corresponding concept, Fraunhofer AISEC also provided assistance in integrating security engineering into the development processes.

Fraunhofer AISEC provides the relevant know-how and experience in the field of security risk analyses to support businesses in the development and adaptation of tried-and-tested methods and to implement these methods into existing processes:

  • Security risk analyses
  • Risk assessment and identification of security requirements
  • Integration of risk assessment with design, specification, implementation, testing, incident response
  • Integration of security aspects into software life cycle processes

Application

  • Selection of well established methods and adaptations for application in the business
  • Development and parameterization of tools

 

  • Transparent assessment of the information technology risk for services and products
  • Management of measures and support for quality assurance
  • Establishment of a sustainable security engineering process