ICS Security Risk Management and Incident Response 2

Question 1

During an ICS incident, the FIRST priority for the incident response team should be:

Accepted Answer

Ensure safety of personnel and prevent physical harm

Answer

In ICS environments, safety of personnel and prevention of physical harm always takes precedence over other incident response objectives.

Question 2

A risk treatment option where an organization accepts the potential loss from a risk without taking action is called:

Accepted Answer

Risk acceptance

Answer

Risk acceptance (also called risk retention) means the organization acknowledges the risk and decides not to take additional action, often because the cost of mitigation exceeds the potential loss.

Question 3

Which NIST publication provides the primary framework for managing cybersecurity risk in critical infrastructure including ICS?

Accepted Answer

NIST Cybersecurity Framework (CSF)

Answer

The NIST Cybersecurity Framework (CSF) provides a common language and systematic methodology for managing cybersecurity risk across critical infrastructure sectors.

Question 4

In an ICS incident response playbook, a 'runbook' is best described as:

Accepted Answer

Step-by-step procedural instructions for responding to a specific incident type

Answer

A runbook contains detailed, step-by-step instructions for responding to a specific type of incident, enabling consistent and efficient response even under pressure.

Question 5

When calculating residual risk in an ICS environment, which formula is most accurate?

Accepted Answer

Residual Risk = Inherent Risk − Controls Effectiveness

Answer

Residual risk is the risk that remains after controls have been applied, calculated as inherent risk minus the effectiveness of implemented security controls.

(ICS) Industrial Control Systems Security Certification Practice Test

(ICS) Industrial Control Systems Security Certification Practice Test

ICS Security Risk Management and Incident Response 2