CyberCertPrepOT Security FundamentalsOT Fundamentals: ICS/SCADA BasicsMEDIUMFree question
A vendor releases a Windows patch for the batch HMIs. The plant runs around the clock and the next planned shutdown is five months away. What is the best approach?
- A.Apply it at once during the current batch to cut exposure
- B.Skip the patch permanently given the HMIs are unnetworked
- C.Let operators install it from USB during any shift
- D.Test in staging then deploy at the next planned outage
Why D is correct
Patches on process systems are validated against the control software first and applied in a maintenance window. Rushing a live patch risks an outage and unvalidated USB installs add malware risk. Declaring the patch unnecessary ignores the exposure.
Know someone studying for OT Security Fundamentals? Send them this one.