ISA/IEC 62443 Cybersecurity Fundamentals Specialist — Question 25

Why is patch management more difficult for IACS than for business systems?

Answer options

• A. Overtime pay is required for technicians.
• B. Many more approvals are required.
• C. Patching a live automation system can create safety risks.
• D. Business systems automatically update.

Correct answer: C

Explanation

The correct answer is C because patching live automation systems can introduce safety risks that could affect operations and safety protocols. Options A and B, while they may add complexity, do not directly relate to the unique safety considerations of IACS. Option D is not applicable since business systems can indeed have automatic updates, further simplifying their patch management.