ISA/IECISA/IEC 62443IEC 62443: Risk Assessment & Asset Owner RequirementsEASYFree question
An OT security program defines a step-by-step document stating exactly how new user accounts on control systems are requested, approved, provisioned, and periodically reviewed. Within the CSMS this is best categorized as a:
- A.Marketing collateral
- B.Network diagram
- C.Business impact analysis
- D.Security procedure for account management
Why D is correct
A step-by-step document governing account request, approval, provisioning, and review is a security procedure that operationalizes account-management policy within the CSMS. Such documented procedures translate high-level policy into repeatable actions. They also provide audit evidence of consistent control.
Know someone studying for ISA/IEC 62443? Send them this one.