Fundamentals Specialist (Module 2) with
Complete Solutions
primary sources for this course - ANSWER-Part 1-1, Part 2-1, and Part 3-3
Workproduct organization - ANSWER-The first or top group, General, contains
standards and reports that are general in nature.
The second group, Policies & Procedures, addresses the people and process aspects
of an
effective security program.
The third group, System, focuses on the technology-related aspects of security.
The fourth group, Component, focuses on specific security-related technical
requirements of
products and components.
You should be familiar with these four groups.
work product highlights - ANSWER-there are fourteen publications, of which ten are
standards and four are technical reports
Technical reports or TRs is standard or informative? - ANSWER-it is informative
PART 1-1 - ANSWER-introduces the terminology, concepts, and models used
throughout the series.
Part 1-2 - ANSWER-Master glossary of terms and definitions
Part 1-3 - ANSWER-describes a methodology to develop and quantify metrics that are
derived from the process and technical requirements in the 62443 series
Part 1-4 - ANSWER-IACS security lifecycle and use cases
policies and procedures group, Part 2-1 - ANSWER-what's required to define and
implement an effective IACS security program
Part 2-2 - ANSWER-To evaluate the level of protection provided by an operational IACS
against the requirements in the ISA/IEC 62443 series of standards
part 2-3 - ANSWER-technical report on patch management processes in the IACS
environment