a different manufacturing ICS platform. Company XYZ has strict ICS security regulations while Which of the following approaches would the network security administrator for Company XYZ MOST likely…

Question

Options

• AConduct a network vulnerability assessment of acquired plant ICS platform and correct all identified
• BConvert the acquired plant ICS platform to the Company XYZ standard ICS platform solely to eliminate
• CConduct a risk assessment of the acquired plant ICS platform and implement any necessary or required

• A
  16% (4)
• B
  28% (7)
• C
  56% (14)

Explanation

The correct approach is to conduct a risk assessment of the acquired ICS platform and implement necessary controls. ICS/SCADA environments are critical infrastructure where changes carry operational risk - improper modifications can cause safety incidents or production outages. A risk assessment first identifies threats, vulnerabilities, and business impact, then prioritizes controls appropriately. A pure vulnerability assessment (option A) only finds weaknesses without weighing operational consequences. Immediately converting to a new ICS platform (option B) risks operational disruption and may not address the actual risks. Risk assessment gives the administrator a defensible, prioritized plan that balances security requirements against operational continuity.

No community discussion yet for this question.