Terminology and Regulations & Standars (ISA/IEC 62443-1-1)

Question 1

ISA/IEC 62443 Series Groups

Answer 1

• General
• Policies & Procedures
• System
• Component

Question 2

Difference between Standars and Technical Reports

Answer 2

Standars are normative in nature, they have shall and must statements.

Technical reports are informative in nature. Are published to provide recommendatios for implementing aproach.

Question 3

The meaning of

IED
DCS
MES
EMS
PLC
HMI

Answer 3

IED: Intelligent Electronic Device
DCS: Distributed Control System
MES: Manufacturing Execution System
EMS: Energy Management System
PLC: Programable Logic Controller
HMI: Human-Machine Interface

Question 4

Acronyms

RTU
HVAC
SCADA
IACS
SIS
ICS

Answer 4

RTU: Remote Terminal Unit
HVAC: Heating, Ventilation, and air-conditioning
SCADA: Sypervisory Control and Data Acquisition
IACS: Industrial Automation and Control System(s)
SIS: Safety Instrumented System
ICS: Industrial Control System(s)

Question 5

STANDARS are mandatory or voluntary?

Answer 5

Regulations being mandatory, standars, compliance and conformance to them is voluntary. It’s consensus driven.

There is no requirement on anyone to use them unless….
* If agreed to in a contract …
* Penalty, either civil or criminal, for not complying with them
* Due Diligence

Question 6

What kind of content do the Standars have?

Answer 6

• Normative: are those parts that shall be complied with in order to demonstrate compliance with the standard.
• Infromative: provide clarification or additional informational

Question 7

What does Frameworks provide?

Answer 7

Provides a common taxonomy and mechanism for organizations.
* Describe current cybersecurity posture
* Describe target state for cybersecurity
* Indentify and prioritize oportunities for improvement within the context of a continuous and repeatable process
* Assess progress toward the target state
* Communicate among internal and external stakeholders about cybersecurity risk

Question 8

Regulations

Answer 8

Specifies legally enforceable requirementes

Question 9

Standars

Answer 9

Voluntary codes for witch there are no legal obligations to comply

Question 10

Normative

Answer 10

Elements that shall be complied with in order to demostrate compliance with the standard

Question 11

Informative

Answer 11

Elements provide clarification or additional information

Question 12

SDO

Answer 12

A Standard Development Organization such as ISA