GRID ICS Security Standards and Compliance 2

Question 1

Under NERC CIP, a 'BES Cyber Asset' (BCA) is classified based on its potential impact to the BES. Which classification carries the highest compliance burden?

Accepted Answer

High Impact

Answer

High Impact BES Cyber Systems face the most stringent NERC CIP requirements because compromise of these assets could have the most severe consequences for bulk electric system reliability.

Question 2

NIST SP 800-82 recommends which network architecture strategy when IT and OT systems must exchange data?

Accepted Answer

Implementation of a DMZ with firewalls between IT and OT

Answer

NIST SP 800-82 recommends using a DMZ (demilitarized zone) with firewalls to separate IT and OT networks while still allowing controlled data exchange, preserving OT isolation without full air-gapping.

Question 3

Which NERC CIP standard addresses 'Systems Security Management,' including management of ports and services, security patches, and malicious code prevention?

Accepted Answer

CIP-007-6

Answer

CIP-007 covers Systems Security Management, requiring utilities to manage enabled ports/services, apply security patches within defined windows, and deploy malicious code prevention tools on BES Cyber Systems.

Question 4

IEC 62443 Part 2-1 focuses on which aspect of IACS security?

Accepted Answer

Establishing an Industrial Automation and Control System Security Management System (CSMS)

Answer

IEC 62443-2-1 defines requirements for establishing, implementing, and maintaining a Cybersecurity Management System (CSMS) for IACS operators, providing the policy and process foundation for OT security programs.

Question 5

What is the primary purpose of the NIST Cybersecurity Framework (CSF) 'Identify' function as applied to ICS environments?

Accepted Answer

Developing organizational understanding to manage cybersecurity risk to systems and assets

Answer

The 'Identify' function focuses on asset management, business environment understanding, risk assessment, and governance—building the foundation needed before protective or detective controls can be applied.

(GRID) GIAC Response and Industrial Defense Practice Test

(GRID) GIAC Response and Industrial Defense Practice Test

GRID ICS Security Standards and Compliance 2