ISA/IECISA/IEC 62443IEC 62443: Risk Assessment & Asset Owner RequirementsEASYFree question
A CSMS includes a procedure requiring that USB devices be scanned at a dedicated kiosk before use on any control-system host. This procedure most directly supports the program area of:
- A.Malware prevention and removable-media control
- B.Wireless spectrum management
- C.Financial auditing
- D.Facility landscaping
Why A is correct
Scanning removable media at a kiosk before use is a malware-prevention control addressing the removable-media threat vector common in OT. It complements endpoint allowlisting and procedural restrictions. This procedure operationalizes the malware-protection element of the program.
Know someone studying for ISA/IEC 62443? Send them this one.