I85PREP
⌘ K
CPPS study materials
CPPS study resources

CPPS practice questions

One question at a time. Build your CPPS understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Culture

In the CPPS body of knowledge, culture is best described as which of the following?

  1. A formal organizational chart listing reporting lines
  2. A written policy manual stored in the compliance library
  3. A shared pattern of values, beliefs, and learned behaviors that shapes how a group interprets its work Correct answer.
  4. A temporary mood that changes with each project deadline

Explanation

Culture in the CPPS framework refers to the shared values, beliefs, assumptions, and learned behaviors that a group uses to interpret situations and guide action. It is enduring and collective rather than a fleeting mood, and it is distinct from structural artifacts such as org charts or written policies. These artifacts may reflect culture, but they are not culture itself.

Question 2Culture

A CPPS practitioner distinguishes between espoused values and enacted values. Which statement captures that distinction?

  1. The two terms are synonyms and can be used interchangeably in CPPS analysis
  2. Enacted values are written in the mission statement, while espoused values are informal
  3. Espoused values are what a group says it believes, while enacted values are what its daily behavior actually demonstrates Correct answer.
  4. Espoused values are always more accurate than enacted values

Explanation

Espoused values are the stated beliefs a group publicly claims, often appearing in mission statements and speeches. Enacted values are revealed through actual decisions, rewards, and everyday behavior. When the two diverge, the enacted pattern usually drives real outcomes, which is why CPPS analysis compares them.

Question 3Culture

Which leadership action most directly reinforces a culture of psychological safety in a CPPS improvement program?

  1. Punishing the first person named in an incident report
  2. Publishing individual error rates on a public dashboard
  3. Requiring approval from three managers before any concern is raised
  4. Rewarding staff who surface errors and near misses with constructive follow-up Correct answer.

Explanation

Psychological safety grows when people believe speaking up will not be punished and that their input is valued. Rewarding the surfacing of errors and near misses, then following up constructively, teaches the group that disclosure is safe and useful. Practices that shame or burden reporters suppress the very information improvement depends on.

Question 4Culture

In CPPS culture work, a just culture is characterized by which approach to human error?

  1. Separating honest mistakes and at-risk behavior from reckless conduct and responding proportionally Correct answer.
  2. Eliminating all disciplinary processes from the organization
  3. Treating all errors identically regardless of context or intent
  4. Assigning blame to the individual closest to the failure in every case

Explanation

A just culture distinguishes among human error, at-risk behavior, and reckless behavior, and calibrates the response to each. Honest mistakes call for support and system fixes, at-risk behavior calls for coaching, and genuine recklessness may warrant sanction. This proportionality keeps reporting open while preserving accountability.

Question 5Culture

A team claims to value continuous improvement, yet every meeting agenda is dominated by defending past decisions. Which cultural diagnosis fits best?

  1. A purely structural problem unrelated to culture
  2. A fully mature improvement culture with strong reflection habits
  3. An absence of any stated organizational values
  4. A gap between espoused and enacted values around improvement Correct answer.

Explanation

The team publicly endorses improvement but behaves defensively, which is a classic espoused-versus-enacted gap. Diagnosing culture requires comparing stated values with observable behavior in meetings and decisions. The pattern points to culture, not merely structure, because the behavior reflects shared norms about protecting past choices.

Question 6Culture

Which practice best supports a learning culture during a CPPS after-action review?

  1. Closing the review once the timeline has been read aloud
  2. Asking what conditions allowed the outcome and what would prevent recurrence Correct answer.
  3. Focusing discussion on which individual should be held responsible
  4. Limiting the review to confirming that procedures were followed

Explanation

A learning culture uses after-action reviews to examine system conditions and identify changes that reduce recurrence. Questions about enabling conditions and prevention shift attention from persons to processes. Reviews that stop at blame or procedural confirmation rarely generate durable improvement.

Question 7Culture

In CPPS terms, which element is a visible artifact of culture rather than an underlying assumption?

  1. A tacit conviction that mistakes reveal character
  2. A shared unspoken belief that raising concerns is risky
  3. The layout of a team workspace and the posters displayed there Correct answer.
  4. A deeply held assumption that hierarchy always knows best

Explanation

Artifacts are the observable, tangible expressions of culture such as physical layout, symbols, rituals, and displayed materials. Underlying assumptions are the invisible, taken-for-granted beliefs that drive behavior. Workspace layout and posters can be seen directly, while the other options describe tacit beliefs.

Question 8Culture

A leader wants to shift culture toward speaking up about safety concerns. Which combination is most consistent with CPPS guidance on culture change?

  1. Issue a single memo announcing the new culture and take no further action
  2. Wait for attitudes to change on their own before touching any processes
  3. Focus exclusively on hiring new staff and ignore existing team norms
  4. Change the reward system, model the behavior personally, and reinforce stories of successful escalation Correct answer.

Explanation

Culture change is reinforced through aligned mechanisms: what gets rewarded, what leaders visibly model, and which stories circulate as exemplars. These levers signal what is genuinely valued and help new norms take hold. One-off announcements or passive waiting rarely shift entrenched patterns.

Question 9Culture

What does a 'blame-free but accountable' culture emphasize in CPPS practice?

  1. Removing all consequences for any behavior
  2. Recording every error against the individual who made it
  3. Avoiding discussion of errors to protect morale
  4. Holding people accountable for choices while treating unintended error as a system issue Correct answer.

Explanation

The phrase captures the just culture balance: unintended error is treated as a signal about system design, while people remain accountable for their choices and at-risk behavior. It avoids both punitive blame and permissive indifference. This balance preserves trust and sustains learning.

Question 10Culture

Which observable indicator most strongly suggests a weak safety culture in a CPPS setting?

  1. Error reports cluster around a few individuals and drop after each incident Correct answer.
  2. Staff report near misses frequently and expect follow-up
  3. Teams debrief unexpected events promptly and share lessons
  4. Leaders ask about barriers during routine walkarounds

Explanation

When reports concentrate on a few people and then fall silent after an incident, it suggests blame and fear are suppressing disclosure. A healthy safety culture shows steady, broad reporting and visible follow-up rather than cycles of blame and silence. Frequent near-miss reporting and prompt debriefs are positive signals.

Question 11Culture

In the CPPS view, why is culture often described as 'the way we do things around here when no one is watching'?

  1. Because culture is created solely by senior executives in written documents
  2. Because culture only exists during formal audits
  3. Because culture disappears once supervision is present
  4. Because culture is reflected in automatic, taken-for-granted behavior rather than stated rules Correct answer.

Explanation

The phrase highlights that culture operates through automatic, taken-for-granted behavior that persists without oversight. It is embedded in habits and assumptions, not just formal rules or documents. This is why observing everyday conduct reveals culture more reliably than reading policy.

Question 12Culture

A CPPS team wants to assess its culture. Which method yields the most useful evidence?

  1. Asking only senior leaders to describe the culture
  2. Triangulating staff surveys, direct observation of routines, and review of incident narratives Correct answer.
  3. Reading the values statement on the organization's website
  4. Relying only on the most recent engagement survey score

Explanation

Culture is best assessed by combining multiple sources: what people report, what is observable in routines, and what artifacts such as incident narratives reveal. Triangulation reduces the risk of mistaking espoused values for enacted ones. Single-source methods tend to capture only one layer.

Question 13Culture

Which statement about subcultures within a CPPS organization is most accurate?

  1. Subcultures are irrelevant to improvement work
  2. A single dominant culture always erases occupational differences
  3. Subcultures never exist in organizations with a strong mission
  4. Different units can develop distinct norms that conflict with the organization's stated culture Correct answer.

Explanation

Organizations typically contain occupational and unit-level subcultures with their own norms, which may align or clash with the broader stated culture. Recognizing these differences matters because improvement efforts must account for varying local assumptions. Assuming a single uniform culture can cause interventions to fail.

Question 14Culture

Leaders repeatedly say 'quality is everyone's job,' but promotions go only to those who hit volume targets. What is the likely cultural effect?

  1. The stated value will automatically override the reward system
  2. Staff will learn that volume, not quality, is truly rewarded Correct answer.
  3. No effect, because rewards and culture are unrelated
  4. Staff will internalize quality as the top priority

Explanation

Enacted values are communicated powerfully by what the reward system actually promotes. When promotions track volume while leaders espouse quality, staff learn the operative priority is volume. This misalignment between espousal and incentives is a common source of cultural cynicism.

Question 15Culture

Which behavior best exemplifies a leader modeling a culture of transparency in CPPS?

  1. Sharing a personal mistake and describing what was learned from it Correct answer.
  2. Withholding bad news until it can be framed favorably
  3. Presenting only successes in review meetings
  4. Delegating all improvement communication to a single spokesperson

Explanation

Leaders model transparency when they openly acknowledge their own errors and the lessons drawn from them. This signals that disclosure is acceptable and expected, which encourages others to do the same. Withholding information or showcasing only successes models the opposite norm.

Question 16Culture

In CPPS culture analysis, what does the term 'cultural web' refer to?

  1. A list of disciplinary actions taken against staff
  2. A framework for examining interconnected elements such as stories, rituals, symbols, and power structures that express culture Correct answer.
  3. A software dashboard for tracking culture survey scores
  4. A network diagram of the formal reporting structure

Explanation

The cultural web is an analytic framework that maps the interconnected elements through which culture is expressed: stories, rituals and routines, symbols, organizational structures, control systems, and power relationships. Reading these elements together reveals the paradigm or shared assumptions beneath them. It is a diagnostic tool, not a software product or an org chart.

Question 17Culture

A CPPS facilitator notices a ritual where new staff are told 'don't ask too many questions for the first year.' Which interpretation is most appropriate?

  1. This ritual is a harmless tradition with no cultural meaning
  2. This ritual indicates a mature learning culture
  3. This ritual strengthens psychological safety for newcomers
  4. This ritual transmits a norm that questioning is unwelcome, which can undermine improvement Correct answer.

Explanation

Rituals and routines carry and transmit norms, and this one teaches newcomers that questioning is discouraged. Such a norm can suppress the curiosity and challenge that improvement depends on. Interpreting rituals as meaningful signals helps diagnose culture.

Question 18Culture

Which statement best captures the relationship between culture and improvement sustainability in CPPS?

  1. Sustained improvement requires eliminating all existing cultural norms
  2. Cultural norms determine whether new practices are adopted, reinforced, and sustained Correct answer.
  3. Culture is irrelevant once a process has been redesigned
  4. Improvements persist mainly because of the tools used, independent of culture

Explanation

Tools and redesigned processes can produce short-term gains, but whether those gains hold depends on whether norms, rewards, and leadership behavior reinforce the new practice. Culture determines adoption and durability. Improvement therefore requires attention to culture alongside technical change.

Question 19Culture

Which is the clearest example of a symbol communicating a CPPS organization's cultural priorities?

  1. A vendor contract stored in procurement
  2. A confidential salary spreadsheet
  3. A prominently displayed board tracking harm and improvement actions in a leadership meeting room Correct answer.
  4. The annual tax filing

Explanation

Symbols are visible objects and displays that convey what a group values. A prominent board tracking harm and improvement actions signals that safety and improvement are priorities. Routine business records such as tax filings or contracts do not carry symbolic cultural meaning in this sense.

Question 20Culture

A CPPS team finds that incident reports spike briefly after leadership messages and then fall to near zero. Which explanation is most plausible?

  1. Reporting is driven by episodic encouragement rather than a stable culture of speaking up Correct answer.
  2. Leadership messages have no influence on reporting
  3. Staff are fully reporting all events consistently
  4. The organization has achieved zero harm

Explanation

A reporting pattern that rises after leadership attention and then collapses suggests compliance with a temporary cue rather than a durable culture of disclosure. Stable cultures show sustained reporting over time. The pattern points to fragile psychological safety rather than genuine zero harm.

Question 21Culture

What is the primary purpose of storytelling about past improvement efforts in CPPS culture work?

  1. To replace formal data collection entirely
  2. To entertain staff during long meetings
  3. To assign blame to the people involved in past events
  4. To transmit norms and lessons that shape how people interpret and act on future events Correct answer.

Explanation

Stories are a vehicle for transmitting cultural norms and lessons, encoding what the group values and how it responds to challenges. Well-told improvement stories can reinforce desired behaviors and shared understanding. They complement, but do not replace, data and formal analysis.

Question 22Culture

Which leadership behavior most undermines psychological safety even when leaders claim to support it?

  1. Responding to bad news with visible irritation and public criticism Correct answer.
  2. Sharing lessons from the team's own near misses
  3. Asking follow-up questions about barriers
  4. Thanking staff who raise concerns

Explanation

Psychological safety is built through responses to vulnerability, and visible irritation or public criticism when bad news arrives teaches people that speaking up is dangerous. Stated support cannot outweigh that experience. Thanking reporters and discussing barriers reinforce safety instead.

Question 23Culture

A CPPS analyst compares two units: Unit A has many reported near misses with follow-up actions; Unit B reports almost none. Which conclusion is most defensible?

  1. Report counts always equal true error rates
  2. Unit A likely has a stronger reporting culture, and Unit B's low count may reflect underreporting Correct answer.
  3. Unit B is safer because it has fewer reports
  4. Neither unit's reporting pattern is informative

Explanation

Report counts reflect both underlying events and willingness to report, so a low count can signal suppression rather than safety. A unit with frequent near-miss reports and visible follow-up usually demonstrates a healthier reporting culture. Comparing counts without considering reporting behavior can mislead.

Question 24Culture

Which statement best describes how onboarding shapes CPPS culture?

  1. Onboarding only matters for technical skill acquisition
  2. Onboarding transmits norms about what is valued, how errors are handled, and how to raise concerns Correct answer.
  3. Onboarding is purely administrative and has no cultural effect
  4. Onboarding should avoid discussing error handling to prevent anxiety

Explanation

Onboarding is an early and powerful transmission point for norms, including how errors are treated and how concerns should be raised. What newcomers learn in their first weeks shapes their assumptions and behavior. Treating onboarding as merely administrative misses its cultural role.

Question 25Culture

In CPPS, what distinguishes a 'reporting culture' from a 'just culture'?

  1. They are identical concepts with no meaningful difference
  2. A just culture discourages reporting to protect staff
  3. A reporting culture requires punishment for every reported event
  4. A reporting culture focuses on encouraging disclosure, while a just culture focuses on responding to that disclosure fairly and proportionally Correct answer.

Explanation

A reporting culture emphasizes creating conditions where people are willing to disclose errors and near misses. A just culture addresses how the organization responds to those reports, calibrating consequences to intent and context. The two are complementary components of a safety culture rather than synonyms.

Question 26Culture

A CPPS organization wants to make its stated cultural values visible to staff and visitors. Which action most directly turns an espoused value into a visible artifact?

  1. Discussing the value during quarterly leadership meetings
  2. Displaying improvement boards in each work area showing current problems and actions Correct answer.
  3. Publishing the value in the annual report only
  4. Including the value in the recruitment advertisement

Explanation

Artifacts are the observable, tangible expressions of culture, such as visual management boards, layouts, and routines that staff encounter daily. A board that shows real problems and actions makes the espoused value concrete and inspectable. Documents and meetings that staff rarely see do not function as visible artifacts in the same way.

Question 27Culture

In CPPS culture work, what is the main purpose of a leader conducting regular gemba walks that include asking frontline staff about obstacles?

  1. To verify that staff are following standard work strictly
  2. To demonstrate visible commitment and surface problems the frontline actually faces Correct answer.
  3. To collect data for the annual performance appraisal cycle
  4. To reduce the number of scheduled meetings in the organization

Explanation

A gemba walk in CPPS is a structured way for leaders to go to where work happens and learn about real obstacles. Its cultural value lies in signaling that problems are welcome and that leaders are present and listening. It is not primarily an inspection or appraisal tool.

Question 28Culture

A CPPS unit adopts a new daily huddle but staff notice that managers only read out metrics and never ask for problems. Which interpretation of this ritual is most consistent with culture analysis?

  1. The huddle is a strong artifact because it happens every day without fail
  2. The huddle is a ritual whose form persists while its intended cultural function has not been adopted Correct answer.
  3. The huddle is irrelevant to culture because rituals do not carry meaning
  4. The huddle proves that the unit has a mature improvement culture

Explanation

Culture analysis distinguishes the outward form of a practice from the assumptions and behaviors that give it meaning. A daily huddle can exist as a ritual while still lacking the problem-surfacing intent that makes it an improvement practice. Frequency alone does not establish cultural adoption.

Question 29Culture

A CPPS organization wants to strengthen a just culture after an error causes harm. Which response best reflects a just-culture approach?

  1. Require all staff to retake the standard operating procedure training
  2. Suspend the involved staff member pending a full investigation
  3. Remove the staff member from patient-facing duties until review is complete
  4. Distinguish between system-induced error and reckless behavior, then address each differently Correct answer.

Explanation

A just culture separates honest errors and at-risk behavior from genuinely reckless conduct and responds proportionately to each. The focus is on learning and system repair for errors while still holding people accountable for reckless choices. Blanket punishment or blanket training misses this distinction.

Question 30Culture

A CPPS team notices that staff describe the organization's values with enthusiasm in interviews, yet daily decisions consistently favor speed over the stated safety priority. Which cultural layer does this gap most directly illustrate?

  1. A failure of the recruitment process to screen for values fit
  2. A shortage of visible artifacts in the workplace
  3. A mismatch between espoused values and underlying assumptions in use Correct answer.
  4. An absence of subcultures within the organization

Explanation

Espoused values are what an organization says it believes, while assumptions in use are revealed by what actually gets rewarded and decided. When daily choices contradict stated values, the gap points to underlying assumptions driving behavior. This is a classic discrepancy between the two layers of culture.

Question 31Culture

In CPPS, which approach best supports embedding a new culture of continuous improvement after a major change initiative ends?

  1. Rely on a small group of champions to carry the practices alone
  2. Rely on the initiative's final report to preserve the new practices
  3. Rely on leaders who continue reinforcing the practices through routines, recognition, and decisions Correct answer.
  4. Rely on external consultants to keep the practices running

Explanation

Culture is sustained through ongoing reinforcement by leaders in everyday routines, recognition, and decision-making. Documents, outsiders, and isolated champions cannot substitute for consistent local reinforcement. When leadership reinforcement stops, practices typically decay back to prior norms.

Question 32Culture

A CPPS analyst is asked to explain why two units with identical policies, training, and equipment show very different improvement results. Which explanation is most consistent with a culture-based analysis?

  1. The units differ in the size of their annual training budget
  2. The units differ in the number of improvement tools they have purchased
  3. The units differ in the shared assumptions and daily norms that shape how staff interpret and act on those policies Correct answer.
  4. The units differ in the number of policies they have written down

Explanation

When formal inputs are essentially equal, culture helps explain divergent outcomes because shared assumptions and norms shape how people interpret and use those inputs. Policies and tools are only as effective as the behaviors and beliefs surrounding them. This is why culture is treated as a variable influencing improvement performance.

Question 33Leadership

A CPPS (cyber-physical production system) steering committee is defining who may authorize changes to a safety-instrumented function's logic. Which governance artifact most directly establishes that authority and its limits?

  1. A vendor maintenance contract with response-time guarantees
  2. A project Gantt chart showing commissioning milestones
  3. A network diagram of the plant's industrial demilitarized zone
  4. A documented set of roles, responsibilities, and decision rights for OT change control Correct answer.

Explanation

Leadership in a CPPS depends on formal accountability structures, and OT change control only works when decision rights are documented and assigned. A roles-and-responsibilities matrix with explicit approval authority makes it clear who can approve logic changes and where segregation of duties applies. The other artifacts describe schedules, topology, or vendor obligations rather than internal authorization.

Question 34Leadership

An operations director wants to measure whether the plant's cyber-physical system leadership is improving safety outcomes over time. Which indicator best reflects leadership effectiveness rather than mere activity?

  1. Trend in repeat findings from safety and security audits of production assets Correct answer.
  2. Total pages in the plant's cyber-physical security policy
  3. Number of security awareness emails sent per quarter
  4. Count of meetings held by the OT steering committee

Explanation

Effective leadership is judged by outcomes, and a declining trend in repeat audit findings shows that corrective actions are actually closing gaps. Activity counts such as emails, meetings, or policy length measure effort, not results. Outcome-oriented indicators keep leadership focused on durable risk reduction.

Question 35Leadership

During a CPPS incident, an operator notices anomalous actuator commands. According to the principle of clear escalation paths, what should leadership have established in advance?

  1. A list of employees authorized to purchase replacement hardware
  2. A rule that only the vendor may speak to the press
  3. A defined sequence of notification and authority handoff from operator to OT security and plant management Correct answer.
  4. A requirement that all incidents be resolved within the same shift

Explanation

Escalation paths define who is notified, in what order, and who assumes decision authority as an incident grows. For cyber-physical incidents, the handoff between operations, OT security, and management must be pre-agreed so response is not delayed by confusion. The other options address communications policy, timing pressure, or procurement rather than escalation.

Question 36Leadership

Which leadership behavior best demonstrates visible commitment to cyber-physical safety culture?

  1. Requiring staff to sign an annual policy acknowledgment only
  2. Posting safety slogans in the control room
  3. Delegating all safety communication to the compliance team
  4. Reviewing near-miss reports personally and following up on corrective actions Correct answer.

Explanation

Visible leadership commitment is shown through sustained personal engagement with safety information and follow-through on corrective actions. Reviewing near misses and tracking fixes signals that reporting is valued and acted upon. Delegation, signature-only compliance, and slogans do not demonstrate genuine engagement.

Question 37Leadership

A plant manager must decide whether to approve a firmware update to a programmable safety controller during peak production. Which leadership approach best balances production and risk?

  1. Reject all updates until the next annual shutdown regardless of risk
  2. Approve immediately to keep the controller vendor-supported
  3. Let the shift supervisor decide without documentation
  4. Require a risk assessment, rollback plan, and defined maintenance window before approval Correct answer.

Explanation

Sound CPPS leadership requires risk-informed decisions that consider safety impact, reversibility, and timing. A documented risk assessment with a rollback plan and controlled maintenance window balances operational continuity with safety. Immediate approval, blanket rejection, or undocumented delegation all ignore key risk factors.

Question 38Leadership

A CPPS organization wants to ensure that security responsibilities are integrated into engineering workflows rather than bolted on afterward. Which structural change best supports this?

  1. Assigning OT security engineers into project teams from the design phase Correct answer.
  2. Adding a security checklist to the final acceptance test only
  3. Creating a separate security department that reviews finished designs
  4. Outsourcing all security testing to a third party at handover

Explanation

Embedding security expertise into project teams during design supports shared ownership and earlier risk identification. Security-by-design requires continuous collaboration, not end-stage review. Late review, outsourcing at handover, or single-point checklists tend to catch issues too late to influence design.

Question 39Leadership

During a tabletop exercise, leadership discovers that OT and IT teams have conflicting assumptions about who owns patching for the historian server. What is the most appropriate leadership response?

  1. Assign ownership to whichever team has more spare capacity
  2. Escalate to the vendor to decide ownership
  3. Defer the decision until the next incident occurs
  4. Document a clear ownership assignment with defined responsibilities and communicate it to both teams Correct answer.

Explanation

Exercises are valuable when they surface ambiguity, and leadership's job is to resolve it through explicit ownership and documented responsibilities. Ambiguity in patching ownership is a common source of unpatched vulnerabilities in CPPS environments. Capacity, vendor delegation, or deferral do not create accountability.

Question 40Leadership

Which statement best describes the leader's role in establishing a speak-up culture for cyber-physical safety concerns?

  1. Require reports to be approved by direct supervisors before submission
  2. Reward employees who avoid reporting minor issues to reduce noise
  3. Ensure reporting channels are accessible and that reporters are protected from retaliation Correct answer.
  4. Limit reporting to formally designated safety officers

Explanation

A speak-up culture depends on accessible channels and credible protection from retaliation. When workers fear blame, early warning signals are lost and small anomalies escalate. Restricting reporting or requiring supervisory approval discourages disclosure.

Question 41Leadership

A CPPS program has limited budget and must prioritize security investments across many production lines. Which leadership criterion is most defensible for prioritization?

  1. The line with the most vocal manager
  2. The line with the newest equipment
  3. The line with the highest combination of safety consequence and exploitability Correct answer.
  4. The line with the largest headcount

Explanation

Risk-based prioritization weighs the severity of potential safety consequences against the likelihood of exploitation. This ensures scarce resources target the greatest reduction in risk. Newness, advocacy, or headcount are not reliable proxies for risk.

Question 42Leadership

What is the primary purpose of a management review of a CPPS security program?

  1. To replace the need for operational audits
  2. To assess whether controls remain effective and to direct corrective action Correct answer.
  3. To approve each individual firewall rule change
  4. To verify individual employees' technical certifications

Explanation

Management review evaluates whether the security program is achieving its objectives and directs resources toward corrective action. It operates at a strategic level, ensuring the system adapts to changing risk. It does not replace technical verification or granular change control.

Question 43Leadership

A CPPS operator reports that a maintenance laptop was connected to a control network without authorization. Which leadership action best reinforces accountability while encouraging future reporting?

  1. Publicly discipline the operator to deter others
  2. Investigate the process gap, thank the reporter, and correct the control weakness Correct answer.
  3. Ban all maintenance laptops from the site
  4. Ignore the report because no harm occurred

Explanation

Just culture principles hold that honest reporting should be encouraged while system weaknesses are corrected. Focusing on the process gap preserves trust and reduces recurrence. Punitive or dismissive responses discourage reporting, and blanket bans are impractical.

Question 44Leadership

Which leadership practice best supports resilience in a cyber-physical production system during a security incident?

  1. Concentrating all response decision authority in one untrained individual
  2. Maintaining pre-defined manual fallback procedures and training staff to execute them Correct answer.
  3. Eliminating manual operations to reduce complexity
  4. Assuming automated systems will always recover without intervention

Explanation

Resilience relies on the ability to continue critical operations safely when automation is degraded. Pre-defined manual fallback procedures and practiced execution allow the plant to maintain safety during incidents. Assumptions of automatic recovery or untrained centralized authority undermine response.

Question 45Leadership

A new regulation requires OT asset inventory completeness within six months. How should leadership best structure the effort?

  1. Rely on the IT asset database as the authoritative source
  2. Assign a single engineer to complete it alone without budget
  3. Wait until the deadline and then request an extension
  4. Establish a cross-functional team with clear milestones, resources, and executive sponsorship Correct answer.

Explanation

Regulatory commitments succeed when leadership provides sponsorship, resources, and a structured plan with milestones. Cross-functional involvement is essential because OT asset discovery spans engineering, operations, and IT. Under-resourcing or relying solely on IT data risks inaccurate inventory.

Question 46Leadership

Which communication practice best supports executive decision-making about CPPS risk?

  1. Sharing detailed packet captures in every briefing
  2. Translating technical risk into business and safety impact with clear options Correct answer.
  3. Presenting raw vulnerability scanner output without context
  4. Reporting only the number of open tickets

Explanation

Executives need risk expressed in terms of safety, operational, and business consequences to make informed decisions. Presenting options with trade-offs enables effective governance. Raw technical data or ticket counts lack the context needed for prioritization.

Question 47Leadership

A CPPS leader is setting up a supplier management program for control system components. Which requirement most directly reduces supply chain risk?

  1. Avoiding all contractual security terms to speed procurement
  2. Selecting suppliers solely on lowest unit price
  3. Requiring suppliers to disclose secure development practices and vulnerability handling Correct answer.
  4. Assuming component security is guaranteed by the supplier's reputation

Explanation

Supply chain risk is reduced when suppliers demonstrate secure development and commit to vulnerability handling. Contractual expectations create accountability for security throughout the product lifecycle. Price-only selection or reliance on reputation leaves risk unmanaged.

Question 48Leadership

A plant experiences a near-miss where a misconfigured remote access rule briefly exposed a control network. Leadership must decide how to respond. Which response best reflects organizational learning?

  1. Prohibit all remote access permanently
  2. Close the ticket after disabling the rule and take no further action
  3. Conduct a facilitated review, update the remote access approval process, and share lessons learned Correct answer.
  4. Fire the engineer responsible for the configuration error

Explanation

Organizational learning requires examining contributing factors and improving processes, not just fixing the immediate symptom. A facilitated review that updates approval controls and shares lessons reduces recurrence. Punitive or blanket responses miss the systemic cause.

Question 49Leadership

Which leadership action best ensures that CPPS security requirements are funded and maintained over the system lifecycle?

  1. Embedding recurring security costs into the annual operating budget and asset lifecycle plan Correct answer.
  2. Treating security as a one-time capital expense at commissioning
  3. Funding security only after a breach occurs
  4. Relying on grant funding that expires after the first year

Explanation

Cyber-physical systems require sustained investment for patching, monitoring, and updates throughout their operational life. Embedding recurring costs in operating budgets and lifecycle plans ensures continuity. One-time or reactive funding leaves long-term gaps.

Question 50Leadership

Two business units operate CPPS lines with different risk tolerances. What leadership approach best aligns them under a single governance framework?

  1. Establish enterprise-level risk tolerance with unit-specific implementation guidance Correct answer.
  2. Defer all decisions to the least regulated business unit
  3. Impose the strictest unit's controls on all units without discussion
  4. Let each unit define its own uncoordinated security standards

Explanation

A coherent governance framework sets enterprise risk tolerance while allowing implementation to reflect local operational realities. This balances consistency with practicality. Fully independent standards or unilaterally imposed controls create friction and inconsistency.