ISA 62443 IC33 - All | Questions and Verified
Answers | 100% Correct
Save
Terms in this set (188)
What is the purpose of assigning a To determine the existing vulnerabilities of the
Target Security Level (SL-T) during system.
the Assess phase of ICS security
implementation?
What happens during the Develop & Countermeasures are implemented to meet the
Implement phase of ICS security Target Security Level (SL-T).
implementation?
What is the primary goal of the To ensure the Achieved Security Level (SL-A) is
Maintain phase in ICS security equal to or better than the Target Security Level
implementation? (SL-T).*
What is phase 1 of the IACS Assess
Cybersecurity Life Cycle?
What is phase 2 of the IACS Develop & Implement
Cybersecurity Life Cycle?
What is phase 3 of the IACS Maintain phase
Cybersecurity Life Cycle?
,What is step 1 of the IACS High-Level Cyber Risk Assessment
Cybersecurity Life Cycle (Assess
Phase)?
What is step 2 of the IACS Allocation of IACS Assets to Security Zones or
Cybersecurity Life Cycle (Assess Conduits
Phase)?
What is step 3 of the IACS Detail Cyber Risk Assessment
Cybersecurity Life Cycle (Assess
Phase)?
What is step 4 of the IACS Cybersecurity Requirements Specification
Cybersecurity Life Cycle (Develop &
Implement Phase)?
What is step 5 of the IACS Design and engineering of Cybersecurity
Cybersecurity Life Cycle (Develop & countermeasures
Implement Phase)?
What is step 6 of the IACS Installation, commissioning and validation of
Cybersecurity Life Cycle (Develop & Cybersecurity countermeasures
Implement Phase)?
What is step 7 of the IACS Cybersecurity Maintenance, Monitoring and
Cybersecurity Life Cycle (Maintain)? Management of Change
What is step 8 of the IACS Cyber Incident Response & Recovery
Cybersecurity Life Cycle (Maintain)?
What are the continuous processes Cybersecurity Management System: Policies,
activities of the IACS Cybersecurity Procedures, Training & Awareness, Periodic
Life Cycle? Cybersecurity Audits
,What must be done before an Create a Project Plan
assessment can be started? ID Steps of the Project to perform the assessment
ID the System Under Assessment
System Under Consideration (SUC) The system or systems within an Industrial
Automation and Control System environment that
are being evaluated or designed for security
enhancements.
System Under Assessment (SUA) The system that is being evaluated for compliance
with standards.
What are some required information Goals of the Assessment
gathering items before the IACS asset inventory
assessment can begin? Understanding of the IACS
Regulations, requirements, and governance of
relevance (Government, Industry, Company)
Architecture diagrams
Configuration Files
Known vulnerabilities
Define roles and responsibilities
Establish training requirements
System Architecture Diagrams Depiction of system components, their connectivity,
and physical locations.
Physical System Architecture A diagram that provides a visual representation of
Diagram the physical components within a system and their
interconnections. It focuses on hardware elements
such as servers, network devices, control systems,
and terminals, showing how these components are
arranged and connected.
, Functional System Architecture A diagram that describes the functions of a system
Diagram and their relationships without focusing on physical
details. It presents a logical view of the system,
emphasizing software elements, data flows, and
interactions between different functions or modules
within the system.
(True/False) IACS functionality True
should be graphically represented
on at least one IACS Architecture
drawing
ISA-95 Functional Layer Level 0 The physical process — This level defines the
physical processes showing data flowing from
sensors and actuators into the control level.
ISA-95 Functional Layer Level 1 Intelligent devices — Devices in this level sense and
manipule the physical processes. Process, sensors,
analyzers, actuators and related instrumentation.
This layer shows how PLCs receive field device
data, process it, and then send commands back to
the field devices.
ISA-95 Functional Layer Level 2 Control systems — Supervising, monitoring and
controlling the physical processes. Real-time
controls and software; DCS, human-machine
interface (HMI); supervisory and data acquisition
(SCADA) software. This level represents how the
control systems manage PLCs, how operator
commands are processed, and how alarm
conditions are handled.
Answers | 100% Correct
Save
Terms in this set (188)
What is the purpose of assigning a To determine the existing vulnerabilities of the
Target Security Level (SL-T) during system.
the Assess phase of ICS security
implementation?
What happens during the Develop & Countermeasures are implemented to meet the
Implement phase of ICS security Target Security Level (SL-T).
implementation?
What is the primary goal of the To ensure the Achieved Security Level (SL-A) is
Maintain phase in ICS security equal to or better than the Target Security Level
implementation? (SL-T).*
What is phase 1 of the IACS Assess
Cybersecurity Life Cycle?
What is phase 2 of the IACS Develop & Implement
Cybersecurity Life Cycle?
What is phase 3 of the IACS Maintain phase
Cybersecurity Life Cycle?
,What is step 1 of the IACS High-Level Cyber Risk Assessment
Cybersecurity Life Cycle (Assess
Phase)?
What is step 2 of the IACS Allocation of IACS Assets to Security Zones or
Cybersecurity Life Cycle (Assess Conduits
Phase)?
What is step 3 of the IACS Detail Cyber Risk Assessment
Cybersecurity Life Cycle (Assess
Phase)?
What is step 4 of the IACS Cybersecurity Requirements Specification
Cybersecurity Life Cycle (Develop &
Implement Phase)?
What is step 5 of the IACS Design and engineering of Cybersecurity
Cybersecurity Life Cycle (Develop & countermeasures
Implement Phase)?
What is step 6 of the IACS Installation, commissioning and validation of
Cybersecurity Life Cycle (Develop & Cybersecurity countermeasures
Implement Phase)?
What is step 7 of the IACS Cybersecurity Maintenance, Monitoring and
Cybersecurity Life Cycle (Maintain)? Management of Change
What is step 8 of the IACS Cyber Incident Response & Recovery
Cybersecurity Life Cycle (Maintain)?
What are the continuous processes Cybersecurity Management System: Policies,
activities of the IACS Cybersecurity Procedures, Training & Awareness, Periodic
Life Cycle? Cybersecurity Audits
,What must be done before an Create a Project Plan
assessment can be started? ID Steps of the Project to perform the assessment
ID the System Under Assessment
System Under Consideration (SUC) The system or systems within an Industrial
Automation and Control System environment that
are being evaluated or designed for security
enhancements.
System Under Assessment (SUA) The system that is being evaluated for compliance
with standards.
What are some required information Goals of the Assessment
gathering items before the IACS asset inventory
assessment can begin? Understanding of the IACS
Regulations, requirements, and governance of
relevance (Government, Industry, Company)
Architecture diagrams
Configuration Files
Known vulnerabilities
Define roles and responsibilities
Establish training requirements
System Architecture Diagrams Depiction of system components, their connectivity,
and physical locations.
Physical System Architecture A diagram that provides a visual representation of
Diagram the physical components within a system and their
interconnections. It focuses on hardware elements
such as servers, network devices, control systems,
and terminals, showing how these components are
arranged and connected.
, Functional System Architecture A diagram that describes the functions of a system
Diagram and their relationships without focusing on physical
details. It presents a logical view of the system,
emphasizing software elements, data flows, and
interactions between different functions or modules
within the system.
(True/False) IACS functionality True
should be graphically represented
on at least one IACS Architecture
drawing
ISA-95 Functional Layer Level 0 The physical process — This level defines the
physical processes showing data flowing from
sensors and actuators into the control level.
ISA-95 Functional Layer Level 1 Intelligent devices — Devices in this level sense and
manipule the physical processes. Process, sensors,
analyzers, actuators and related instrumentation.
This layer shows how PLCs receive field device
data, process it, and then send commands back to
the field devices.
ISA-95 Functional Layer Level 2 Control systems — Supervising, monitoring and
controlling the physical processes. Real-time
controls and software; DCS, human-machine
interface (HMI); supervisory and data acquisition
(SCADA) software. This level represents how the
control systems manage PLCs, how operator
commands are processed, and how alarm
conditions are handled.
