A green-field project team wants to embed IEC 62443-3-2 into design from the start. At what project phase does the standard intend the risk assessment to occur?

• A.Only after the plant is fully operational, an activity associated with the conformance assessment scheme for legacy installations
• B.Only during decommissioning
• C.During system design, so zones, conduits, and SL-T inform the architecture before build
• D.Exclusively after a security incident, an approach that applies when a system integrator is combining components from multiple suppliers into a single automation solution, an entry mapped to the essential function baseline in the standard