Under the IEC 62443 role model, which party operates the facility and is accountable for the security program of its control system?
- A.The service provider that built the system
- B.The asset owner running the facility
- C.The product supplier of the controllers
- D.The certification body auditing the supplier
Why B is correct
The asset owner operates the IACS and carries accountability for its security program. Product suppliers, service providers and certification bodies have defined but different responsibilities.
Know someone studying for OT Security Fundamentals? Send them this one.