ISA/IECISA/IEC 62443IEC 62443: Risk Assessment & Asset Owner RequirementsEASYFree question
Within a CSMS, the activity of grouping identified risks by severity and likelihood so resources can be prioritized is referred to as risk:
- A.Classification
- B.Transference
- C.Obfuscation
- D.Capitalization
Why A is correct
Risk classification organizes identified risks by attributes such as severity and likelihood, enabling prioritized treatment. IEC 62443-2-1 treats identification and classification as early CSMS steps feeding countermeasure decisions. Clear classification prevents misallocation of limited OT security resources.
Know someone studying for ISA/IEC 62443? Send them this one.