A green-field project team wants to embed IEC 62443-3-2 into design from the start. At what project phase does the standard intend the risk assessment to occur?
A.During system design, so zones, conduits, and SL-T inform the architecture before build
B.Only after the plant is fully operational
C.Only during decommissioning
D.Exclusively after a security incident
Why A is correct
IEC 62443-3-2 is explicitly a design-time activity; performing it during system design lets zones, conduits, and SL-T shape the architecture and procurement before construction. Deferring it until operation or after an incident loses the design influence.
Know someone studying for ISA/IEC 62443? Send them this one.
CyberCertPrep gives you 20 free ISA/IEC 62443 questions per day with this same answer-and-explanation depth, plus timed exam simulations and progress tracking. No card required.
ISA/IEC 62443 and ISA/IEC are trademarks or registered trademarks of their respective owners. CyberCertPrep is an independent exam-preparation resource and is not affiliated with, authorized by, sponsored by, or endorsed by ISA/IEC or any other certification body. All study material is independently created; the certification name is used only to identify the exam this resource helps you prepare for.
A CSMS classifies a risk as high likelihood and high consequence. The classification's main purpose in the next CSMS step is to: