A ransomware event leaves operators able to see live values but every command from the HMI is ignored by the controllers. Which ICS impact is this?
- A.Loss of safety from a disabled trip
- B.Loss of view with commands working
- C.Denial of control with the view intact
- D.Manipulation of view using false data
Why C is correct
Commands that no longer reach the process while data still arrives is Denial or Loss of Control. Loss of view is the opposite case, manipulation of view means falsified values, and loss of safety concerns protective functions.
Know someone studying for OT Security Fundamentals? Send them this one.