An approach that covers all levels simultaneously – from operational to field level, and from access control to copy protection – is essential for comprehensively protecting industrial facilities against internal and external cyberattacks.