A Company Relies on an ICS to Perform Equipment Monitoring

question 95

Multiple Choice

A company relies on an ICS to perform equipment monitoring functions that are federally mandated for operation of the facility. Fines for non-compliance could be costly. The ICS has known vulnerabilities and can no longer be patched or updated. Cyber-liability insurance cannot be obtained because insurance companies will not insure this equipment. Which of the following would be the BEST option to manage this risk to the company's production environment?

• A) Avoid the risk by removing the ICS from production
• B) Transfer the risk associated with the ICS vulnerabilities
• C) Mitigate the risk by restricting access to the ICS
• D) Accept the risk and upgrade the ICS when possible

---

Definitions:

Operant Conditioning

An approach to learning in which behavior modification is achieved through positive reinforcement or negative punishment.

Trick or Treat

A Halloween custom for children in many countries, where they dress in costume and solicit candy or other treats door-to-door with the phrase "Trick or treat."

Cumulative Record

A graphical representation showing the total number of responses recorded over time during a behavioral observation or experiment.

Pause

A temporary stop or delay in action or speech, often used for effect, consideration, or to break between ideas.