A water treatment plant is developing a new ICS security policy. The security manager has drafted the policy and is now identifying who should be responsible for enforcing it. Which role is typically accountable for enforcing ICS security policies at the plant level?

The external auditor, who reviews compliance annually

The plant manager, who has authority over plant operations and personnel

The shift operator, who uses the systems daily

The security software vendor, who provides the technical tools

Which stakeholder group is typically responsible for the day-to-day operation and safety of the industrial process, and therefore must be involved in ICS security policy development?

Operations and engineering personnel

What is the primary purpose of an Industrial Control System (ICS) security program within an organization?

To ensure that all ICS data is encrypted and stored in the cloud for centralized monitoring

To replace all legacy ICS components with modern IT systems to eliminate cyber risk

To provide a framework for auditing financial transactions within the industrial control network

To ensure the reliable and safe operation of industrial processes by protecting the availability, integrity, and confidentiality of ICS assets and data

Which of the following best describes the scope of an ICS security program?

It includes all hardware, software, data, networks, and personnel that support the industrial control environment, including the interface to corporate IT

It covers only the corporate IT network and its connection to the internet

It focuses exclusively on the physical security of the facility, such as fences and locks

It is limited to the safety instrumented systems (SIS) that protect against process hazards

A natural gas distribution company is developing a policy for patch management of its ICS assets. The policy must align with the company's regulatory obligations under state pipeline safety rules. What is the first step in developing this policy?

Select a commercial patch management tool and deploy it to all ICS assets

Write the policy based on the IT department's existing patch management policy

Schedule a patch window for the next month and notify all operators

Identify the regulatory requirements and internal risk tolerance that the policy must satisfy

GIAC Global Industrial Cyber Security Professional

Domain 3Objective 2

ICS Program & Policy Development GICSP Practice Questions (Page 3)

Part of the Security Management and Response domain, which makes up ~33% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~23–40 in this domain), expect 8–13 from this objective — we provide 51 practice questions to prepare you well beyond it. (estimate)

51questions here

11free pages

8concepts

Questions 11–15

11application · medium
A water treatment plant is developing a new ICS security policy. The security manager has drafted the policy and is now identifying who should be responsible for enforcing it. Which role is typically accountable for enforcing ICS security policies at the plant level?
Select an answer first
12foundation · easy
Which stakeholder group is typically responsible for the day-to-day operation and safety of the industrial process, and therefore must be involved in ICS security policy development?
Select an answer first
13foundation · easy
What is the primary purpose of an Industrial Control System (ICS) security program within an organization?
Select an answer first
14foundation · easy
Which of the following best describes the scope of an ICS security program?
Select an answer first
15application · medium
A natural gas distribution company is developing a policy for patch management of its ICS assets. The policy must align with the company's regulatory obligations under state pipeline safety rules. What is the first step in developing this policy?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GICSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GICSP” is a trademark of its owner, used for identification only.