Hi lbomboesSE,

There is currently no process for the SIMATIC IOT2050 that checks compliance with the Open Worldwide Security Project (OWASP) recommendations. Nevertheless, Siemens is pursuing various standards and concepts with the IOT2050 in order to be able to guarantee a high level of security:

1. Cybersecurity for industrial automation systems: The development-environment and -process fulfills the cybersecurity standard IEC62443-4-1 for industrial automation systems
2. Siemens internal requirements: Different safety standards apply throughout Siemens, which must also be observed for the IOT2050
3. Siemens Vulnerability Management: This data base is continuously updated and some test tool take OWASP for reference.

It's also very difficult to give you specific answers to the different points of the OWASP-checklist as these points addressing different parts of the product (hardware, general concept, Industrial OS, etc.).

We will get in touch directly with you to discuss the different topics of the checklist to give you you a rough orientation of the IOT2050 to OWASP.

BR