ICS Program & Policy Development GICSP Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A manufacturing company is drafting a new ICS security policy. The policy will require all remote vendor access to the OT network to be brokered through a jump host with multi-factor authentication. The OT engineering manager is concerned that this will slow down emergency troubleshooting. Which step in the policy development process is most important to address this concern?

   • ADelegate the policy approval solely to the IT security team to avoid internal conflicts.
   • BInclude a formal review and approval step where the OT engineering manager and other stakeholders can negotiate an exception process for emergency access.
   • CPublish the policy immediately so the requirement is in place before the next vendor visit.
   • DRemove the multi-factor authentication requirement to avoid slowing down vendor access.
   Reveal Solution Discussion Select an answer first
2. 27expert · hard

   A chemical plant has an ICS security policy that was developed by the IT department without input from OT. The policy requires all OT systems to be patched within 48 hours of a vendor release. The OT team has repeatedly missed the deadline because patching requires a plant shutdown. The policy is routinely violated, and the IT department is pushing for disciplinary action. Which action best resolves this conflict?

   • AHave the IT department apply patches remotely without OT involvement.
   • BChange the policy to allow unlimited time for patching.
   • CReview and revise the policy with OT stakeholders to establish realistic patching windows and a risk-based exception process.
   • DEnforce the existing policy through disciplinary action to ensure compliance.
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   Which of the following is an effective method for enforcing ICS security policies?

   • AImplementing technical controls such as network segmentation and access control lists
   • BConducting annual security awareness training only
   • CRelying solely on employee awareness and voluntary compliance
   • DPublishing the policy on the company website
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A pharmaceutical company has implemented a new ICS security policy that requires all changes to the batch control system to go through a formal change advisory board (CAB). The operators are not following the process because they find it time-consuming. What is the most effective way to improve compliance?

   • ADisable the operators' ability to make any changes until they complete the process.
   • BIncrease the frequency of security awareness training for all operators.
   • CAdd a step to the CAB process that requires operators to document why they skipped the process.
   • DSimplify the CAB process for low-risk changes while keeping full review for high-risk changes, and train operators on the revised workflow.
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A food processing plant has implemented a new ICS security policy that prohibits personal USB drives on OT workstations. The plant manager wants to ensure the policy is effectively enforced. Which action is the most effective first step to enforce this policy?

   • AAsk employees to sign an acknowledgment form and rely on their commitment
   • BConfigure OT workstations to disable USB ports via group policy and technical controls
   • CPost signs near OT workstations reminding employees not to use personal USB drives
   • DSend a one-time email to all employees explaining the new policy
   Reveal Solution Discussion Select an answer first