ICS Legal Authority & Use of Force 3

Question 1

A chemical plant security team receives a court order to preserve all digital evidence from a compromised HMI. Which legal doctrine requires them to halt normal log-rotation procedures?

Accepted Answer

Legal hold (litigation hold)

Answer

A legal hold requires an organization to suspend normal data destruction or alteration processes to preserve evidence relevant to anticipated or active litigation.

Question 2

Which concept describes the documented, unbroken transfer of evidence from an ICS incident scene to the courtroom?

Accepted Answer

Chain of custody

Answer

Chain of custody documents every person who handled evidence and every location it was stored, ensuring its integrity is not challenged in court.

Question 3

A security professional conducting ICS vulnerability assessments for a U.S. federal agency must comply with which overarching federal information security law?

Accepted Answer

FISMA (Federal Information Security Modernization Act)

Answer

FISMA establishes requirements for information security programs at federal agencies and contractors handling federal information, including ICS systems.

Question 4

In an ICS environment, what is the minimum requirement before security personnel may use force to defend against a cyberattack causing physical harm?

Accepted Answer

Imminent threat of serious bodily harm or death must exist

Answer

Use of physical force in defense against a cyberattack causing physical effects is governed by standard self-defense law requiring an imminent threat of serious harm.

Question 5

Which international framework addresses the law of armed conflict as it applies to cyber operations targeting critical infrastructure like ICS?

Accepted Answer

Tallinn Manual

Answer

The Tallinn Manual is a non-binding expert analysis that applies international humanitarian law and laws of armed conflict to cyber operations, including attacks on critical infrastructure.

(ICS) Industrial Control Systems Security Certification Practice Test

(ICS) Industrial Control Systems Security Certification Practice Test

ICS Legal Authority & Use of Force 3