ISA/IECISA/IEC 62443IEC 62443: System & Component Security RequirementsEASYFree question
A vendor states that its industrial firewall achieves a particular security level under IEC 62443-4-2 testing. This product-level rating is best described as which of the following?
- A.SL-T (target) of the deployment zone
- B.SL-C (capability) of the component
- C.SL-A (achieved) after integration
- D.SL-R (residual) after risk assessment
Why B is correct
IEC 62443-4-2 certifies a component's security capability, expressed as SL-C, which describes what the product is inherently able to support. SL-T applies to zones and conduits from 62443-3-2, and SL-A is what is actually achieved once the system is deployed and configured.
Know someone studying for ISA/IEC 62443? Send them this one.