A utility procurement clause requires an integrator to hold evidence against IEC 62443-2-4. What does that evidence demonstrate?
- A.Hardening level of a specific controller shipped to the plant site
- B.Compliance of the finished plant with a chosen target level
- C.Cyber insurance coverage held by the contracted integrator
- D.Security capability of the integrator's own engineering process
Why D is correct
Part 2-4 evaluates the security capabilities of the service provider's own processes. Device hardening is 4-2, the achieved plant level is assessed against 3-3 and insurance is outside the series.
Know someone studying for OT Security Fundamentals? Send them this one.