Why should an asset owner maintain an accurate asset inventory as part of its IEC 62443-2-1 program before risk assessment?
A.To satisfy marketing requirements
B.Because inventories replace the need for zones and conduits
C.Because unknown or undocumented assets cannot be properly scoped, zoned, or assessed, leaving blind spots in the risk picture
D.Because the supplier owns the inventory
Why C is correct
An accurate inventory is foundational because assets that are unknown cannot be scoped into the SUC, assigned to zones, or assessed, creating blind spots that undermine the entire risk evaluation. The asset owner maintains this inventory under its security program.
Know someone studying for ISA/IEC 62443? Send them this one.
CyberCertPrep gives you 20 free ISA/IEC 62443 questions per day with this same answer-and-explanation depth, plus timed exam simulations and progress tracking. No card required.
ISA/IEC 62443 and ISA/IEC are trademarks or registered trademarks of their respective owners. CyberCertPrep is an independent exam-preparation resource and is not affiliated with, authorized by, sponsored by, or endorsed by ISA/IEC or any other certification body. All study material is independently created; the certification name is used only to identify the exam this resource helps you prepare for.
A CSMS classifies a risk as high likelihood and high consequence. The classification's main purpose in the next CSMS step is to: