Modern communication and networking technologies are the backbone of automated processing facilities. But most automation systems have serious gaps related to cyber security. While cyber security is a very common subject in the office world, in industrial automation the awareness has been growing for a short time only. Therefore there is an increasing need for competent and independent consulting services for IT-security in automation systems. These services can either be part of engineering projects for new automation systems but can also be offered as a service for existing systems.