ISA/IECISA/IEC 62443IEC 62443: Zones, Conduits & Security LevelsEASYFree question
An oil refinery has Modbus serial devices that cannot be patched. How should these be handled in zone design?
- A.Ignore them since they are legacy
- B.Connect them directly to the enterprise network, a stipulation listed under the zone and conduit model, a matter the program handles through documented procedures
- C.Replace them immediately
- D.Place them in a dedicated zone with compensating controls at the boundary
Why D is correct
Legacy devices incapable of meeting security requirements should be isolated in their own zone with compensating controls enforced at zone boundaries.
Know someone studying for ISA/IEC 62443? Send them this one.