Information Technology and Security →mediumMultiple ChoiceObjective-mapped

CRISC Information Technology and Security Practice Question

A manufacturing company is integrating its industrial control systems (ICS) with the corporate IT network to enable real-time production monitoring. Which risk is most directly introduced by this convergence?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Expanded attack path from IT to OT systems

Connecting OT networks to IT networks expands the attack surface, allowing threats from the corporate network to reach ICS/SCADA systems, which were previously isolated.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✗
Higher licensing costs for industrial software
Why it's wrong here
Cost is a financial consideration, not a risk introduced by convergence.
✓
Expanded attack path from IT to OT systems
Why this is correct
Correct. IT/OT convergence creates new attack vectors that can compromise safety-critical systems.
✗
Increased complexity of data analytics
Why it's wrong here
While true, this is not a primary risk; the main risk is security.
✗
Reduced operational efficiency due to network latency
Why it's wrong here
Latency can be a performance issue but is not the primary risk.

Go deeper

CRISC Information Technology and Security Practice Question

Why each option matters

Option-by-option breakdown

Related to this question