ISASecure for Product Suppliers and Assessors (IC47)

JavaScript isn't enabled in your browser, so this file can't be opened. Enable and reload.

©Copyright International Society of Automation (ISA) 2025. All rights reserved.
Artificial Intelligence Notice: ISA prohibits the entry of ISA standards and related ISA intellectual property (“ISA IP”) into any form of Artificial Intelligence (AI) tools, such as ChatGPT. Additionally, creating derivatives of ISA IP using AI is also prohibited without express written permission from ISA’s CEO. In the case of such use, ISA will suspend a licensee’s access to ISA IP, and further legal action will be considered. Please review ISA's Terms and Conditions for further information.

1. Which of the following formulas is the definition of risk for cybersecurity?
*

a. Risk = threat x asset x consequence

b. Risk = threat x vulnerability x consequence

c. Risk = threat x vulnerability x cost

d. Risk = threat agent x threat x vulnerability

e. Both B and C are correct

2. The desired level of security for a particular security zone is known as the __________. *

a. Target security level

b. Achieved security level

c. Capability security level

d. Protection level

3. Which of the following are required to be in separate security zones? (Choose all that apply.) *

a. Enterprise devices and control devices

b. Wireless devices and control devices

c. Portable devices and control devices

d. Control devices and safety devices

Required

4. Which Maturity Levels require that processes are repeatable? *

a. Maturity Level 1

b. Maturity Level 2

c. Maturity Level 3

d. Maturity Level 4

Required

5. Which of the following are included in an IACS security program? *

a. Security organization and policies

b. Configuration management

c. User access control

d. Event and incident management

e. All of the above

f. None of the above

6. Which of the following are included in an IACS product security development lifecycle? (Choose all that apply.)
*

a. Specification of security requirements

b. Network segmentation

c. Security update management

d. User access control

Required

7. Which of the following are foundational requirements? (Choose all that apply.)
*

a. User access control

b. System integrity

c. Restricted data flow

d. Secure by design

Required

8. The definition of Security Level 3 is protection against intentional violation using __________. *

a. Sophisticated means, moderate resources, IACS specific skills and moderate motivation

b. Simple means, low resources, generic skills and low motivation

c. Sophisticated means, extended resources, IACS specific skills and high motivation

9. Which of the following are not typically a consequence of a cyber-attack on an IT system? (Choose all that apply.)
*

a. Loss of public confidence

b. Endangerment of public or employee safety

c. Economic loss

d. Loss of environmental protection

Required

10. Which of the following are considered to be essential functions? (Choose all that apply.) *

a. Protect safety/health

b. Maintain Control

c. View and manipulate the Equipment Under Control

d. Protect information

Required

Submit

Clear form

This form was created inside of International Society of Automation.

Does this form look suspicious? Report

Forms