QuestionQ83

Security Architecture

A pharmaceutical company has acquired a growing startup. The pharmaceutical company has a comprehensive OT stack, whereas the startup permits employees to install IoT devices without oversight. Both companies will continue operating independently, with some systems shared and others kept separate. Which of the following considerations are most important when designing the newly combined systems?

Choose two
  • A Data privacy
  • B Aggregation
  • C Environmental
  • D Segmentation
  • E Safety monitoring
  • F Regulation
Explanation

Network segmentation isolates unmanaged IoT devices and limits their ability to communicate with, or compromise, critical OT systems. OT directly monitors or controls physical processes, so safety monitoring is essential to maintain the safe and reliable operation of those systems. NIST OT guidance specifically recommends segmentation and isolation as part of defense in depth and identifies safety requirements as a distinctive OT concern.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!