The IEC 62443 series divides its documents into numbered groups. Which group of parts (the 2-x series) is dedicated to policies and procedures for an industrial automation and control system security program?
- A.The 1-x parts covering general concepts, terminology, and metrics
- B.The 2-x parts covering policies and procedures such as the security management system
- C.The 4-x parts covering secure product development and component requirements
- D.The 3-x parts covering system-level technology and security levels
Why B is correct
IEC 62443 is organized into four groups: 1-x (general), 2-x (policies and procedures), 3-x (system), and 4-x (component). The 2-x series, including 62443-2-1, addresses establishing and operating a cybersecurity management system. Knowing this structure lets practitioners locate the right document for a given audience.
Know someone studying for OT Security Fundamentals? Send them this one.