Certbie
Question 1 of 30
A multinational energy corporation operating critical infrastructure is undergoing a digital transformation of its supervisory control and data acquisition (SCADA) systems. The Chief Information Security Officer (CISO) is tasked with establishing a new OT security governance framework that ensures both operational continuity and compliance with evolving cybersecurity mandates like NERC CIP and ISA/IEC 62443. Which of the following approaches would most effectively address the complex interplay of technical security, operational constraints, and regulatory adherence for their OT environment?
Implement a unified security policy across IT and OT, focusing on stringent access controls, regular vulnerability scanning, and centralized logging, while establishing a dedicated OT security steering committee with representation from operations, engineering, and security teams to oversee policy implementation and risk management.
Prioritize the deployment of advanced threat detection solutions and intrusion prevention systems within the OT network, relying primarily on IT security best practices and outsourcing continuous monitoring to a third-party managed security service provider.
Develop a bespoke OT security strategy that isolates OT systems from IT networks, mandates air-gapping for all critical components, and focuses solely on physical security measures and manual patching procedures to minimize operational disruption.
Concentrate on achieving immediate compliance with ISA/IEC 62443 by implementing its core security controls without establishing a dedicated governance committee, assuming that IT security leadership will naturally extend their oversight to the OT domain.

Preparing for NSE7OTS6.4 Fortinet NSE 7 OT Security 6.4? Now land the interview.

73% of qualified candidates get rejected because of weak resumes. Build an ATS-optimized, recruiter-ready resume in under 5 minutes - free to start.

Build My Resume Free