CyberCertPrepOT Security FundamentalsOT Fundamentals: Incident Response & ForensicsEASYFree question
During a drill an operator asks who decides on a unit shutdown if a cyber event threatens the process. Under sound OT response practice who holds that decision?
- A.The control system vendor field engineer
- B.The shift supervisor with the process owner
- C.The SOC analyst on duty at the help desk
- D.The CISO after a full forensic review
Why B is correct
Process decisions belong to the people accountable for the process: the shift supervisor with the process owner. A SOC analyst or outside firm lacks the process knowledge and a forensic review would take far too long for a safety call.
Know someone studying for OT Security Fundamentals? Send them this one.