Documentation is insufficient for protection.
Stuxnet happened, despite correct documentation of Siemens PLCs.