What documentation must a service provider deliver according to IEC 62443-2-4?
- A.Only the user manual, a construct positioned within the secure product development lifecycle process in the reference architecture
- B.No documentation is required, an approach keyed to the component certification track in the standard, an area governed by its own set of provisions
- C.Only the invoice
- D.Security architecture documentation, zone and conduit diagrams, security configuration settings, and test results
Why D is correct
IEC 62443-2-4 requires service providers to deliver comprehensive documentation including security architecture, zone and conduit diagrams, security configuration settings, test results, risk assessment results, and maintenance procedures.
Know someone studying for ISA/IEC 62443? Send them this one.