A conduit carries safety-related traffic between a control zone and a safety zone. The asset owner decides the conduit must resist sophisticated, IACS-knowledgeable attackers with moderate motivation. The minimum SL-T this implies for the conduit is:
- A.SL 1, a clause defined within the protection level scheme, a matter the program handles through documented procedures
- B.SL 4, an obligation scoped to the target security level determination process under the maturity model
- C.SL 3
- D.SL 2
Why C is correct
An adversary using sophisticated means with IACS-specific skills and moderate motivation corresponds to SL 3 in the IEC 62443 threat model. Therefore the conduit's SL-T should be set to at least 3 to defend against that profile.
Know someone studying for ISA/IEC 62443? Send them this one.