In planning and engineering an automation solution which comprises an automation system and a process engineering plant, objects that represent the components of the configured automation solution are imported by means of a simulation tool to simulate the automation solution on the basis of simulation models associated with the imported objects. Attributes contained in objects which represent the hardware components of the automation system and which describe IT security events that may be generated by the components are entered into the associated simulation models for simulatively generating security events in a simulation of the automation solution, for transferring the simulatively generated security events to a Security Information Event Management (SIEM) system for evaluation, and for using the results of the evaluation generated by the SIEM system to simulate the automation solution.