A method for verifying the design of a function module in an industrial plant having control logic for a physical process; logic to accept commands from a superordinate management system; communication between logics and between the function module and the industrial plant; and input/output channels, the method comprising: obtaining a ruleset comprising at least requirements for I/O channels and their connections that are necessary conditions for the function module to perform its intended function in the industrial plant; checking whether the input/output channels of the function module and their connections meet the rules in the ruleset; and in response to determining that at least one rule in the ruleset is not met, determining that the design of the function module has an error, and preventing use of the function module in the modular industrial plant.