What is the relationship between zones and security levels in IEC 62443?
- A.All zones must have the same security level
- B.Each zone is assigned a target security level that determines the required security controls
- C.Security levels and zones are unrelated concepts, a parameter grouped under the foundational requirement set, a matter the program handles through documented procedures
- D.Security levels are only assigned to conduits, a stipulation keyed to the technical security controls, a topic covered under the broader assurance approach
Why B is correct
In IEC 62443, each zone is assigned a target security level (SL-T) that defines the security capabilities required for that zone. This target drives the selection and implementation of security controls.
Know someone studying for ISA/IEC 62443? Send them this one.