Intro to IACS Lifecycle

Question 1

3 Phases of IACS cybersecurity lifecycle

Answer 1

1 - Assess - Assign (SL-T)
2 - Develop and Implement
countermeasures to
Meet SL (T). Achieved
Security level SL (A)
depends on various
factors.
3 - Maintain - SL (A) >= SL
(T). Countermeasures
are audited and
upgraded if necessary,
to reach and maintain
achieved SL (A).

Question 2

Assess Phase (3-2)

Answer 2

1 - Initial or high-level
assessment.
2 - Allocation of assets into
zones and conduits.
3 - Detailed cyber risk
assessments.

Question 3

Develop and Implement (3-3 & 3-1)

Answer 3

1- Cybersecurity
requirement
specifications
2 - Design and engineering
of cybersecurity
countermeasures.
2a - Design and
development of other
means of risk
reduction.
3 - Installation,
commissioning and
validation of
cybersecurity
countermeasures.

Question 4

Maintain (2-1)

Answer 4

1 - Cybersecurity
Maintenance,
Monitoring and
Management of
change.
2 - Cyber Incident
Response & Recovery.