ISA/IECISA/IEC 62443IEC 62443: System & Component Security RequirementsEASYFree question
A firewall placed between the enterprise zone and the industrial DMZ enforces that only specific protocols and source/destination pairs may cross. From the foundational-requirement perspective, this conduit control chiefly serves:
- A.FR 1 Identification and Authentication Control
- B.FR 6 Timely Response to Events
- C.FR 4 Data Confidentiality
- D.FR 5 Restricted Data Flow
Why D is correct
Restricting which traffic may pass between zones over a conduit is the essence of FR 5 (Restricted Data Flow). The DMZ and firewall rule set enforce segmentation, limiting both legitimate flow and the potential spread of an attack.
Know someone studying for ISA/IEC 62443? Send them this one.