Communication & Conflict Resolution Flashcards
7 cards from real ICS practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Communication & Conflict Resolution flashcards as text
During an ICS security incident, the operations team insists on maintaining production while the security team wants to isolate affected systems. What is the BEST approach to resolve this conflict?
Answer: Convene a joint risk assessment with both teams to evaluate production impact versus security exposure
A joint risk assessment ensures both operational continuity and security concerns are weighed before a decision is made.
Which communication protocol is commonly used for SCADA systems to transmit data between field devices and control centers in legacy ICS environments?
Answer: Modbus
Modbus is one of the oldest and most widely used serial communication protocols in legacy SCADA and ICS environments.
An ICS security analyst disagrees with a vendor's recommended patch schedule for a PLC. What is the MOST appropriate first step?
Answer: Document the concern and request a formal technical review meeting with the vendor
Requesting a formal technical review ensures the concern is documented and addressed through proper channels.
In the context of ICS security communications, what does the principle of 'need-to-know' primarily govern?
Answer: Restricting sensitive system information to personnel with a justified operational or security role
Need-to-know limits access to sensitive ICS information only to those whose roles require it, reducing insider threat risk.
When a conflict arises between IT security policies and OT operational requirements in an ICS environment, which framework is most commonly referenced to find a balanced resolution?
Answer: IEC 62443
IEC 62443 is specifically designed to address cybersecurity in industrial automation and control systems, bridging IT/OT concerns.
A plant manager rejects an ICS security team's recommendation to segment the control network, citing cost. Which communication strategy is MOST effective for the security team?
Answer: Present a business risk analysis quantifying potential downtime and liability costs of a breach
Translating security needs into financial and operational risk terms is the most persuasive approach for decision-makers focused on costs.
Which of the following BEST describes 'out-of-band' communication in ICS incident response?
Answer: Using a separate, dedicated communication channel not connected to the compromised network
Out-of-band communication uses a channel isolated from the affected network to ensure communication integrity during an incident.