ICS Report Writing & Documentation 3

Question 1

What is the recommended practice for classifying sensitive ICS security reports?

Accepted Answer

Apply classification labels (e.g., Confidential, Restricted) and limit distribution on a need-to-know basis

Answer

Sensitive ICS reports should carry appropriate classification markings and be distributed only to personnel who require the information to perform their duties.

Question 2

Which of the following BEST describes a 'finding' in an ICS vulnerability assessment report?

Accepted Answer

A specific identified weakness, its evidence, risk rating, and recommended remediation

Answer

A finding presents a specific vulnerability with supporting evidence, a risk rating, and actionable remediation guidance.

Question 3

What is the purpose of a 'risk register' in ICS security documentation?

Accepted Answer

To maintain a centralized log of identified risks, their likelihood, impact, and mitigation status

Answer

A risk register provides a living document that tracks each identified risk, enabling management to monitor mitigation progress over time.

Question 4

During post-incident documentation for an ICS breach, which timeline artifact is most valuable for forensic reconstruction?

Accepted Answer

System and network log timestamps correlated to event sequence

Answer

Correlated log timestamps allow analysts to reconstruct the exact sequence of events, which is foundational to forensic investigation.

Question 5

An ICS security report recommends patching a critical PLC firmware vulnerability. The recommendation should include:

Accepted Answer

Risk rating, patch steps, testing requirements, rollback plan, and responsible party

Answer

Actionable recommendations must include enough detail—risk context, steps, testing, rollback, and ownership—for safe implementation in an ICS environment.

(ICS) Industrial Control Systems Security Certification Practice Test

(ICS) Industrial Control Systems Security Certification Practice Test

ICS Report Writing & Documentation 3