An integrator is commissioning a system under IEC 62443. Which duty belongs to the integrator rather than to the product supplier?
- A.Running a vulnerability handling process for released products
- B.Providing component capability documentation with each device
- C.Operating the secure development lifecycle for the firmware
- D.Applying the security design per zone during project delivery
Why D is correct
The integrator turns the zone and conduit requirements into an installed design during the project. Vulnerability handling, device documentation and the firmware lifecycle are supplier duties.
Know someone studying for OT Security Fundamentals? Send them this one.