Who is accountable for the different phases of the IACS Automation Solution Security Lifecycle?
Answer(s): A
According to the ISA/IEC 62443 series, the asset owner holds overall accountability for all phases of the IACS Automation Solution Security Lifecycle, even though they may delegate implementation tasks to suppliers or service providers.
What is the purpose of NIST-800-50?
Answer(s): C
NIST Special Publication 800-50 provides guidance on establishing and maintaining an effective IT security awareness and training program to reduce cybersecurity risks.
In what step of the development process of the CSMS is “Establish purpose, organizational support, resources, and scope” taken care of?
The step “Establish purpose, organizational support, resources, and scope” is part of the initial phase when initiating the Cyber Security Management System (CSMS) program, setting the foundation for all subsequent activities.
What is TRUE regarding safety systems?
Answer(s): B
Despite their critical role and isolation, safety systems can still be compromised, as shown by real-world incidents like Triton/Trisis, which specifically targeted safety instrumented systems (SIS).
How can defense in depth be achieved via security zones?
Defense in depth can be implemented by segmenting systems into security zones and subzones, where each layer adds controls and isolation, reducing the risk of lateral movement by attackers.
Post your Comments and Discuss ISA Cybersecurity Fundamentals Specialist exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the Cybersecurity Fundamentals Specialist content, but please register or login to continue.