ISA/IEC 62443 Models Flashcards
Asset Model
Describes relationships between assets within an industrial automation and control system
Reference Architecture Model
Describes the configuration of assets
Zone Models Groups
Reference architecture elements according to defined characteristics (zone and conduits)
Models
Provide a context for the definition of policies, proceures, and guidelines, applied to the assets.
Reference Model Levels (ANSI/ISA 95)
- Level 4: Business Planning & Logistics
- Level 3: Manufacturing Operations Management
- Level 2: Monitoring supervisory control and automated control of the production process
- Level 1: Sensing the production process, manipulating the production process
- Level 0: The actual production process
Reference Model For ISA99 Standards
- Level 4: Enterprise Systems (Business Planning & Logistics)
- Level 3: Operations Management
- Level 2: Supervisory control
- Level 1: Basic Control. Safety and Protection
- Level 0: The actual production process
Security Zones
Is a logical grouping of physical, informational, and application assets sharing common security requirements.
* Zones within zones, subzones
* Layered security, defense-in-depth
* Has a border/boudary between includen and excluded elements
* Security policy of zone typically enforced by a combination of mechanisms both at the zone edge and within the zone.
Conduit
Is a logical grouping of communication assets that protects the security of the channels it contains.
A conduit is a logical grouping of communication channels, connecting two or more zones, that share common security requirements
Definition
Provides the overall conceptual basis
Reference Model
Definition
A logical grouping of physical, informational, and application assets sharing common security requirements
Security Zone
Definition
Describes the configuration of assets
Zone Model Group
Definition
References architecture elements according to defined chareacterisitcs (zone and conduits)
Reference Architecture
Definition
A cable or wireless that connects zones for communication purposes
Conduit
Which type of model provide the overall conceptual basis?
Reference Model
True of False
Defense-in-Depth involves applying multiple countermeasures in a layered or stepwise manner.
True