A refinery response team assigns duties for a cyber event on the crude unit DCS. Who should own the call to move a loop to manual control?
- A.The network engineer who owns the firewall rules
- B.The incident commander from the corporate SOC
- C.The console operator with the unit supervisor
- D.The vendor support engineer on the phone
Why C is correct
Switching a loop to manual changes how the process is run and is an operations decision made by the console operator with the supervisor. Network staff and vendors advise but do not accept the process risk.
Know someone studying for OT Security Fundamentals? Send them this one.