Legal Authority & Use of Force Flashcards

A security officer at a nuclear power plant uses a firearm to stop an intruder near the reactor control room. Which federal regulation governs the use of deadly force in this scenario?

Answer: NRC 10 CFR 73.55 (Physical Protection of Licensed Activities)

NRC 10 CFR 73.55 establishes physical protection requirements for nuclear facilities, including provisions governing armed response and use of force by security personnel.

Which legal doctrine may shield an ICS security analyst from criminal liability when accessing a system believed to be compromised, based on owner consent obtained under duress or deception?

Answer: Mistake of fact defense

A mistake of fact defense may apply when a security analyst genuinely and reasonably believed they had valid authorization, even if that belief was incorrect due to deception.

Under the Chemical Facility Anti-Terrorism Standards (CFATS), facilities must restrict access to which type of area using security measures that may include armed guards?

Answer: Critical Asset areas with chemicals of interest

CFATS requires high-risk chemical facilities to restrict and control access to critical assets, particularly those involving chemicals of interest (COI) that could be weaponized.

When an ICS security professional discovers evidence of a foreign nation-state attack during a private sector assessment, which reporting obligation may arise?

Answer: They may be required to report to CISA and the FBI under applicable laws and contractual obligations

Depending on contractual agreements and applicable law, discovering nation-state intrusions may trigger mandatory reporting to CISA and FBI, particularly for critical infrastructure operators.

Which principle prevents ICS security personnel from conducting surveillance of employees without proper legal authorization, even within a secured facility?

Answer: Fourth Amendment protections and applicable state wiretapping laws

Fourth Amendment protections and state electronic surveillance laws limit monitoring of individuals, and violations can result in evidence being inadmissible and civil/criminal liability.

A water utility's security team wants to deploy automated defensive tools that can actively block attacker IP addresses. Which legal consideration is MOST critical before deployment?

Answer: Confirming the tools do not constitute unauthorized access to third-party systems

Automated blocking tools that interact with or affect third-party infrastructure could violate the CFAA, so organizations must ensure defensive actions are confined to their own authorized systems.

Which standard of proof is required before a private critical infrastructure operator can legally detain a suspected insider threat for law enforcement handoff?

Answer: Probable cause that a crime has been committed

Private security personnel making a citizen's arrest must have probable cause to believe a crime has been or is being committed to justify detaining an individual for law enforcement.