A purchasing department is drafting contract language requiring suppliers to demonstrate secure development and vulnerability handling for delivered control equipment. Which CSMS area does this strengthen?
A.Supply-chain and procurement security
B.Employee cafeteria operations
C.Physical perimeter fencing
D.Marketing brand guidelines
Why A is correct
Embedding security expectations into procurement contracts addresses supply-chain risk, ensuring suppliers meet defined development and vulnerability-handling standards. IEC 62443-2-1 promotes integrating security requirements into purchasing processes. This shifts assurance left, before equipment enters the plant.
Know someone studying for ISA/IEC 62443? Send them this one.
CyberCertPrep gives you 20 free ISA/IEC 62443 questions per day with this same answer-and-explanation depth, plus timed exam simulations and progress tracking. No card required.
ISA/IEC 62443 and ISA/IEC are trademarks or registered trademarks of their respective owners. CyberCertPrep is an independent exam-preparation resource and is not affiliated with, authorized by, sponsored by, or endorsed by ISA/IEC or any other certification body. All study material is independently created; the certification name is used only to identify the exam this resource helps you prepare for.
A CSMS classifies a risk as high likelihood and high consequence. The classification's main purpose in the next CSMS step is to: