CyberCertPrepOT Security FundamentalsOT Fundamentals: Securing Industrial Control SystemsMEDIUMFree question
When ranking inventoried assets for protection effort at a chemical plant, which attribute should drive priority first?
- A.Age of the device from its first commissioning date
- B.Number of open TCP ports counted by a scanner
- C.Cost of replacing the unit from the vendor
- D.Consequence of compromise to safety or production output
Why D is correct
Risk in OT is driven by what an attacker could do to the process, so consequence to safety and production comes first. Age, port counts and replacement price are inputs but do not rank the harm.
Know someone studying for OT Security Fundamentals? Send them this one.