Segmenting by function, a plant separates corrosion-monitoring sensors (low criticality) from emergency shutdown logic (high criticality) into distinct zones. This zoning decision is most directly guided by:
- A.The color of the cabling used
- B.The vendor's marketing tier
- C.Grouping assets that share equivalent criticality and security requirements, per IEC 62443 zone definition
- D.The number of Ethernet ports available
Why C is correct
IEC 62443 zones group assets with comparable security and criticality requirements so each zone gets controls matched to its risk. Mixing low-criticality monitoring with emergency-shutdown logic would force one set of controls onto dissimilar risk profiles.
Know someone studying for OT Security Fundamentals? Send them this one.