A risk assessment determines that for the safety zone the asset owner needs the highest protection against well-resourced, highly motivated attackers with IACS expertise. The SL-T appropriate to this adversary profile is:
- A.SL 1, a practice attached to the protection level scheme within the framework, an area governed by its own set of provisions
- B.SL 4
- C.SL 3, a provision associated with the foundational requirement set under the program requirements
- D.SL 2
Why B is correct
SL 4 is defined for protection against intentional violation using sophisticated means, extended resources, IACS-specific skills, and high motivation, the profile of a determined, well-funded adversary such as a nation-state. This matches the described threat.
Know someone studying for ISA/IEC 62443? Send them this one.