ICS Security Standards and Compliance Frameworks 2

Question 1

Which NERC CIP standard specifically addresses Electronic Security Perimeters (ESPs) for bulk electric system cyber assets?

Accepted Answer

NERC CIP-005

Answer

NERC CIP-005 defines requirements for identifying and protecting Electronic Security Perimeters around high and medium impact BES cyber systems.

Question 2

The IEC 62443 standard series addresses security for which type of systems?

Accepted Answer

Industrial Automation and Control Systems (IACS)

Answer

IEC 62443 is the international standard series specifically developed for Industrial Automation and Control Systems (IACS) security.

Question 3

Under NIST SP 800-82, which security zone concept involves grouping OT assets with similar security requirements?

Accepted Answer

Security zones and conduits

Answer

NIST SP 800-82 adopts IEC 62443's zones and conduits concept to group OT assets by security requirements and manage inter-zone communications.

Question 4

Which compliance framework mandates that critical infrastructure owners report significant cybersecurity incidents to CISA within 72 hours?

Accepted Answer

CIRCIA

Answer

The Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA) requires covered entities to report significant cyber incidents to CISA within 72 hours.

Question 5

In IEC 62443, what term describes the maximum tolerable level of security risk for a given system or zone?

Accepted Answer

Target Security Level (SL-T)

Answer

The Target Security Level (SL-T) in IEC 62443 defines the desired security level that a zone or conduit must achieve based on risk assessment.

(ICS) Industrial Control Systems Security Certification Practice Test

(ICS) Industrial Control Systems Security Certification Practice Test

ICS Security Standards and Compliance Frameworks 2