An OT incident at a chemical facility releases toxic effluent into a nearby river after attackers altered dosing controls.
Beyond downtime, this introduces which OT-specific consequence category often absent from IT breaches?
- A.Exposure of marketing analytics data stored in the plant report store
- B.Loss of email availability, an assurance vendor conformance suites verify explicitly
- C.Brand reputation loss only measured only in the share price movements
- D.Environmental and safety harm to people and the surrounding ecosystem
Why D is correct
Manipulating physical processes can produce real-world environmental contamination, injuries, or loss of life, consequences that pure IT data breaches do not carry. This is why OT risk assessments weight safety and environmental impact alongside traditional confidentiality, integrity, and availability concerns.
Know someone studying for OT Security Fundamentals? Send them this one.