Legal Authority & Use of Force Flashcards
7 cards from real ICS practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Legal Authority & Use of Force flashcards as text
Under U.S. law, which entity has authority to declare a cyberattack on an ICS an 'act of war' triggering potential military response?
Answer: The President of the United States
Under the U.S. Constitution, the President holds authority as Commander-in-Chief to characterize a cyberattack as an act of war and authorize a military response.
Which legal concept protects an ICS security vendor from liability when their tools cause unintended disruption during an authorized security assessment?
Answer: Contractual indemnification clause
A contractual indemnification clause in the security assessment agreement shifts liability away from the vendor to the contracting organization for authorized activities.
An ICS operator discovers ransomware is spreading through their OT network. Which action is legally required under CIRCIA 2022 for covered critical infrastructure entities?
Answer: Report the incident to CISA within 72 hours
CIRCIA 2022 requires covered critical infrastructure entities to report significant cyber incidents to CISA within 72 hours of discovery.
What distinguishes 'use of force' from 'use of deadly force' in a critical infrastructure security context?
Answer: Deadly force is likely to cause death or serious bodily injury; use of force is not
Deadly force is legally defined as force that is likely to cause death or serious bodily injury, while general use of force encompasses lesser physical interventions.
Which legal authority allows U.S. federal agencies to direct ICS operators at private utilities to take specific protective actions during a declared national cyber emergency?
Answer: Defense Production Act and National Emergencies Act
The Defense Production Act and National Emergencies Act grant the President authority to direct private sector actions, including ICS operators, during declared national emergencies.
A court issues a search warrant for digital forensic evidence from a compromised ICS historian server. Who has legal authority to execute this warrant?
Answer: Law enforcement officers named in the warrant
Search warrants may only be executed by law enforcement officers with proper jurisdiction, as specified in the warrant itself.
Which ICS-specific regulation imposes civil penalties for violations of mandatory cybersecurity standards in the bulk electric system?
Answer: NERC CIP Standards
NERC CIP standards carry civil penalties of up to $1 million per violation per day, making them the primary regulatory enforcement mechanism for bulk electric system cybersecurity.