GRID ICS Security Standards and Compliance

Question 1

What bulk infrastructure does the NERC CIP standard set primarily protect?

Accepted Answer

The Bulk Electric System (BES)

Answer

NERC CIP (Critical Infrastructure Protection) standards were developed specifically to protect the reliability and security of the North American Bulk Electric System.

Question 2

Which NERC CIP standard specifically governs Electronic Security Perimeters (ESPs) and remote access management?

Accepted Answer

CIP-005-7

Answer

CIP-005 covers Electronic Security Perimeters, requiring utilities to define and protect logical borders around BES Cyber Systems and control remote access.

Question 3

IEC 62443 defines security using the concept of 'Zones and Conduits.' What is the primary purpose of a Conduit in this model?

Accepted Answer

A logical or physical communication channel connecting two or more security zones

Answer

In IEC 62443, a Conduit is the communication pathway (logical or physical) that links security zones; it must be protected and controlled to prevent unauthorized data flow between zones.

Question 4

NIST Special Publication 800-82 was written to provide guidance for which type of system?

Accepted Answer

Industrial Control Systems (ICS) including SCADA and DCS

Answer

NIST SP 800-82 'Guide to Industrial Control Systems Security' is dedicated to ICS environments such as SCADA, DCS, and PLCs, covering unique OT security considerations.

Question 5

In the IEC 62443 security level framework, what does Security Level 2 (SL 2) describe?

Accepted Answer

Protection against intentional violation using simple means and low motivation

Answer

SL 2 in IEC 62443 targets protection against deliberate but low-sophistication attacks by adversaries with limited resources and motivation, such as opportunistic hackers.

(GRID) GIAC Response and Industrial Defense Practice Test

(GRID) GIAC Response and Industrial Defense Practice Test

GRID ICS Security Standards and Compliance