Due to different framework conditions, knowledge, and approaches in the areas of office IT and OT, problems can arise in the implementation of overarching security requirements. On the one hand, security specifications from the area of office IT may not be implemented due to technical or procedural particularities of ICS systems. On the other, the information security officer responsible for office IT may not be familiar with ICS-specific information security and safety aspects (that is, aspects of functional security). This can lead to friction in communication and implementation. It can also result in risks not being recognised or inadequately addressed.