ISA/IECISA/IEC 62443IEC 62443: Risk Assessment & Asset Owner RequirementsEASYFree question
Within the IEC 62443 series, ultimate accountability for accepting residual cybersecurity risk in an operating IACS rests with which party?
- A.The asset owner
- B.The product supplier of the PLCs
- C.The system integrator who commissioned the system
- D.The independent certification body
Why A is correct
IEC 62443 assigns the asset owner ultimate accountability for the IACS and for accepting residual risk; ZCR 6 explicitly requires asset owner approval. Suppliers and integrators contribute capabilities and services but do not own the operational risk.
Know someone studying for ISA/IEC 62443? Send them this one.