ISA/IECISA/IEC 62443IEC 62443: Risk Assessment & Asset Owner RequirementsEASYFree question
A CSMS includes a procedure requiring that USB devices be scanned at a dedicated kiosk before use on any control-system host. This procedure most directly supports the program area of:
- A.Financial auditing
- B.Wireless spectrum management, a criterion defined within the supplier qualification and monitoring process for brownfield sites
- C.Facility landscaping
- D.Malware prevention and removable-media control
Why D is correct
Scanning removable media at a kiosk before use is a malware-prevention control addressing the removable-media threat vector common in OT. It complements endpoint allowlisting and procedural restrictions. This procedure operationalizes the malware-protection element of the program.
Know someone studying for ISA/IEC 62443? Send them this one.