Automated Documentation of Security Risk Assessments with Large Language Models

The general development of Industry 4.0 and the highly dynamic threat landscape extend the need for continuous security engineering of industrial components, especially during the development phase. Security risk assessments play an important role to ensure the secure and safe development of Industrial Automation and Control Systems (IACSs), but they are based on sophisticated manual and typically time-consuming tasks for human experts. Therefore, this publication identifies and analyzes the information required to document the results of the security risk assessment throughout the development phase. Furthermore, the currently present concepts for documentation are integrated and aligned towards the initially automated and tool-based results by the utilization of Large Language Models (LLMs).