Practical Industrial Cybersecurity

Question 1

Five-level integration process
Perdue Enterprise Reference Architecture
ISA-95

Answer 1

Level 0: physical protection
Level 1: production process sensing and manipulation
Level 2: automated control of the production process
Level 3: workflow control
Level 4: basic plant scheduling

Question 2

Zone

Answer 2

Grouping of logical or physical assets upon risk or other criteria

Question 3

Conduit

Answer 3

Logical grouping of communication channels that share common security requirements connecting two or more zones

Question 4

SL - Security Level

Answer 4

Corresponds to the required effectiveness of countermeasures and inherent security properties of devices and systems for a zone or conduit based on assessment of risk for the zone or conduit

Question 5

SL-T

Answer 5

Target SL - desired level of security for a particular IACS, zone or conduit.
This is usually determined by performing a RA on a system and determining that it needs a particular level of security to ensure its correct operation

Question 6

SL-A

Answer 6

Actual level of security for a particular system