An OT incident at a chemical facility releases toxic effluent into a nearby river after attackers altered dosing controls. Beyond downtime, this introduces which OT-specific consequence category often absent from IT breaches?
- A.Environmental and safety harm to people and the surrounding ecosystem
- B.Loss of email availability
- C.Exposure of marketing analytics data
- D.Brand reputation loss only
Why A is correct
Manipulating physical processes can produce real-world environmental contamination, injuries, or loss of life, consequences that pure IT data breaches do not carry. This is why OT risk assessments weight safety and environmental impact alongside traditional confidentiality, integrity, and availability concerns.
Know someone studying for OT Security Fundamentals? Send them this one.