ISA/IECISA/IEC 62443IEC 62443: System & Component Security RequirementsEASYFree question
An organization wants to assign protection priorities differently to its safety zone versus its engineering zone, even though both face the same plant. IEC 62443 accommodates this by allowing each zone to have:
- A.A single shared SL-T for the whole plant
- B.No security level at all
- C.Only an SL-C from the vendor
- D.Its own SL-T vector derived from a zone-specific risk assessment
Why D is correct
The zone-and-conduit model assigns each zone its own SL-T vector based on a risk assessment of that zone's specific threats and consequences. This lets a safety zone carry a higher target for certain FRs than a less critical engineering zone.
Know someone studying for ISA/IEC 62443? Send them this one.