CRISC Information Technology and Security Practice Question
A risk manager is evaluating the application of IEC 62443 for industrial control systems. Which THREE of the following are key security requirements addressed by this standard?
⚠ Common exam trap
Many exam-takers confuse general operational or physical security measures (like environmental monitoring or data center security) with the specific cybersecurity controls mandated by IEC 62443 for industrial control systems.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Identification and authentication control
IEC 62443 is a series of standards specifically designed for the security of Industrial Automation and Control Systems (IACS). It addresses cybersecurity requirements to protect these systems from cyber threats. Identification and authentication control (B) is a foundational requirement, ensuring that only authorized users and devices can access the system, which is critical for preventing unauthorized access to industrial processes.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Environmental monitoring (temperature, humidity)
Why it's wrong here
Environmental controls are not within scope of IEC 62443.
- ✓
Identification and authentication control
Why this is correct
Ensures only authorized users and devices access the system.
- ✓
System integrity
Why this is correct
Ensures the system has not been tampered with and operates as intended.
- ✗
Physical security of data centers
Why it's wrong here
IEC 62443 focuses on cybersecurity, not physical security of data centers.
- ✓
Use control (authorization)
Why this is correct
Restricts actions that authenticated users can perform.
Go deeper
Related to this question
About these practice questions
One of 983 original CRISC practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CRISC practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CRISC exam.