Adjustments and further developments of IT systems, applications, and control programs can represent critical interventions in the corresponding control system. Disruptions can be caused by functional errors in inadequate testing and validation steps, faulty or manipulated project planning data, or weaknesses in software. Important security functions such as input and output or authorisation checks can be insufficiently implemented, for example.

Other threats can result from insecure development environments; unsuitable storage of program code, documentation, or project data; or from data transfer interfaces.