When a flaw in Industrial control (ICS) software is discovered, what is the GREATEST impediment to deploying a patch?

The correct answer is C. Testing a patch in an IG may require more resources than the organization can commit.. Industrial control systems (ICS) are critical for the operation of many sectors such as energy, transportation, manufacturing, and water. Patching ICS software is a challenging task because it may require extensive testing, validation, and coordination to ensure that the patch do

Submitted by kim_seoul· Mar 5, 2026Security Operations

Question

Options

AMany IG systems have software that is no longer being maintained by the venders.
BCompensating controls may impact IG performance.
CTesting a patch in an IG may require more resources than the organization can commit.
Dvendors are required to validate the operability patches.

How the community answered

(28 responses)

A
4% (1)
B
11% (3)
C
82% (23)
D
4% (1)

Explanation

Industrial control systems (ICS) are critical for the operation of many sectors such as energy, transportation, manufacturing, and water. Patching ICS software is a challenging task because it may require extensive testing, validation, and coordination to ensure that the patch does not introduce new vulnerabilities, affect the functionality, performance, or availability of the system, or cause any adverse impacts on the physical processes or safety. Testing a patch in an ICS may require more resources than the organization can commit, such as time, personnel, equipment, or budget. Therefore, this is the greatest impediment to deploying a patch for ICS software.

Topics

#Industrial Control Systems#Patch management#Critical infrastructure security#Operational technology (OT)

Community Discussion

No community discussion yet for this question.

Full CISSP Practice