Which configuration on an HMI most directly enforces least functionality for the operator role?
- A.Lock the HMI into a kiosk/runtime shell so operators cannot reach the underlying OS, file system, or other applications
- B.Grant operators local administrator rights to troubleshoot quickly
- C.Allow operators to install vendor utilities as needed
- D.Disable the screen lock so operators are never interrupted
Why A is correct
Running the HMI in a locked kiosk or runtime shell restricts the operator to the control interface and blocks access to the OS, file system, and unrelated programs. This enforces least functionality precisely where operators interact with the system.
Know someone studying for OT Security Fundamentals? Send them this one.