ISA/IEC 62443 Cybersecurity Fundamentals Specialist — Question 4

Which is a common pitfall when initiating a CSMS program?

Answer options

• A. Organizational lack of communication
• B. Failure to relate to the mission of the organization
• C. Insufficient documentation due to lack of good follow-up
• D. Immediate jump into detailed risk assessment

Correct answer: B

Explanation

The correct answer is B because failing to align the CSMS program with the organization's mission can lead to a lack of purpose and direction. Options A and C, while relevant, are more about process and communication rather than the foundational alignment with the organization's goals. Option D highlights a premature focus on risk assessment, which is also a mistake but does not address the fundamental alignment issue.