ISA/IECISA/IEC 62443IEC 62443: Risk Assessment & Asset Owner RequirementsEASYFree question
IEC 62443-3-2 carries the title "Security risk assessment for system design." Which deliverable sits at the center of the workflow it defines?
- A.A documented set of zones, conduits, and target security levels for the IACS under consideration
- B.A continuous monitoring playbook for the security operations center
- C.A product certification report for embedded controllers
- D.An incident response runbook tailored to OT environments
Why A is correct
IEC 62443-3-2 drives a risk-based partitioning of the system under consideration into zones and conduits and the assignment of target security levels (SL-T). It is a design-time standard, not an operational monitoring or product-certification document.
Know someone studying for ISA/IEC 62443? Send them this one.