nerdexam
Cisco

350-201 · Question #127

A security architect in an automotive factory is working on the Cyber Security Management System and is implementing procedures and creating policies to prevent attacks. Which standard must the…

The correct answer is B. IEC62443. IEC 62443 is the international standard that defines requirements for Cybersecurity Management Systems (CSMS) in industrial environments, including automotive manufacturing.

Security Policies and Procedures

Question

A security architect in an automotive factory is working on the Cyber Security Management System and is implementing procedures and creating policies to prevent attacks. Which standard must the architect apply?

Options

  • AIEC62446
  • BIEC62443
  • CIEC62439-3
  • DIEC62439-2

How the community answered

(15 responses)
  • A
    7% (1)
  • B
    93% (14)

Why each option

IEC 62443 is the international standard that defines requirements for Cybersecurity Management Systems (CSMS) in industrial environments, including automotive manufacturing.

AIEC62446

IEC 62446 covers photovoltaic (solar) system documentation and testing requirements, not industrial cybersecurity management.

BIEC62443Correct

IEC 62443 is the standard specifically designed for Industrial Automation and Control Systems (IACS) cybersecurity, including automotive factories. It provides a framework for establishing, implementing, and maintaining a Cyber Security Management System (CSMS), covering policies, procedures, and controls to prevent attacks on operational technology environments.

CIEC62439-3

IEC 62439-3 defines high-availability redundancy protocols (PRP/HSR) for industrial networks, not cybersecurity management systems.

DIEC62439-2

IEC 62439-2 defines the Media Redundancy Protocol (MRP) for network resilience, not cybersecurity policies or management systems.

Concept tested: IEC 62443 standard for industrial cybersecurity management

Source: https://www.iec.ch/iec62443

Topics

#IEC62443#industrial cybersecurity#automotive security#CSMS

Community Discussion

No community discussion yet for this question.

Full 350-201 Practice