This project investigates the practical use of state‑of‑the‑art Large Language Models (LLMs) to transform high‑level, standard‑driven cyber‑security controls into concrete, system‑specific requirements. Using a synthetic yet industrially plausible case study—AI4I4, an IoT‑enabled automotive logistics platform—we benchmark thirteen frontier models (GPT‑4, LLaMa 3, Mistral, QWen, etc.), representing tge state of the art as of September 2024, across four prompting pipelines and three temperature regimes.

Key contributions include:

1. **Annotated benchmark** of 54 ISO‑27002 clauses with placeholder semantics suitable for automatic instantiation.

2. **LangChain pipelines** that decompose the task into applicability filtering, domain‑element search, requirement generation, and JSON formatting.

3. **Comprehensive evaluation** of accuracy (precision, recall, F2), creativity (F2‑synthetic), and consistency (Jaccard overlap across runs).

4. **Prompt library** enumerating >180 templates, showing how subtle changes in instruction design affect hallucination rate and coverage.

The artefacts and scripts below allow full replication—from raw prompts to final figures—on any infrastructure with access to the referenced models.

 

For more information on the repository structure, reproducibility, licensing, and contact details, please refer to the README.