A.Significant changes in identified risk round in periodic reassessments

B.Review of system logs and other key data files

C.Restricted access to the industrial control system to an as-needed basis

D.Increase in staff training and security awareness

A.Cyber Security Management System

B.Cyber Security Monitoring System

C.Control System Management System

D.Control System Monitoring System

A.Establish the risk tolerance.

B.Identify detailed vulnerabilities.

C.Implement countermeasures.

D.Communicate policies.

A.Session layer

B.Presentation layer

C.Data link layer

D.Application layer

A.Layer 3

B.Layer 1

C.Layer 2

D.Layer 7