ISA/IECISA/IEC 62443IEC 62443: System & Component Security RequirementsEASYFree question
An OT security architect argues that no single control should be the sole barrier between the enterprise network and the safety-instrumented system. The IEC 62443 strategy that formalizes layering of independent controls across zones and conduits is known as:
- A.Security through obscurity
- B.Air-gap absolutism
- C.Single point accreditation
- D.Defense in depth
Why D is correct
Defense in depth, a core principle throughout IEC 62443, layers multiple independent protective measures so that the failure or bypass of one control does not compromise the entire system. The foundational requirements collectively support this layered approach.
Know someone studying for ISA/IEC 62443? Send them this one.