A Manufacturing Company's Security Engineer Is Concerned a Remote Actor

question 358

Multiple Choice

A manufacturing company's security engineer is concerned a remote actor may be able to access the ICS that is used to monitor the factory lines. The security engineer recently proposed some techniques to reduce the attack surface of the ICS to the Chief Information Security Officer (CISO) . Which of the following would BEST track the reductions to show the CISO the engineer's plan is successful during each phase?

• A) Conducting tabletop exercises to evaluate system risk
• B) Contracting a third-party auditor after the project is finished
• C) Performing pre- and post-implementation penetration tests
• D) Running frequent vulnerability scans during the project

---

Definitions:

Sample Size

The number of observations or data points in a study or experiment.

Null Hypothesis

A statement that assumes no relationship or difference between certain variables.

Type I Error

Type I Error occurs when a true null hypothesis is incorrectly rejected, often symbolized as the false positive rate in hypothesis testing.

Chance

The occurrence and development of events in the absence of any obvious intention or cause.