ISA/IECISA/IEC 62443IEC 62443: Risk Assessment & Asset Owner RequirementsEASYFree question
IEC 62443-2-4 expects service providers to define how they handle account management for the systems they support. A clear failure of this capability would be:
- A.Leaving vendor default administrative accounts active after commissioning
- B.Removing default accounts and enforcing unique credentials
- C.Disabling unused accounts promptly
- D.Documenting every account and its purpose
Why A is correct
Leaving default administrative accounts active is a well-known, easily exploited weakness and a clear failure of the account-management capability. The other options describe sound practices the standard encourages. Eliminating defaults and enforcing unique, least-privilege credentials is fundamental in OT.
Know someone studying for ISA/IEC 62443? Send them this one.