A method for modifying an industrial control program is provided, the industrial control program comprising a first program element having a safety classification and a second program element not having the safety classification. The method comprises: identifying, in program source code of the first program element, a call to the second program element, and generating a modified program source code, comprising replacing, in the program source code, the call to the second program element by an auxiliary program element, the auxiliary program element being compliant with the safety classification.