CSSA ICS/SCADA Security Architect preparation case studies
CSSA ICS/SCADA Security Architect preparation · Put your knowledge to work in context.
This independent study page provides practice for CSSA ICS/SCADA Security Architect preparation. Its editorial learning areas include OT process context, trust boundaries and controlled connectivity; OT monitoring, change control, response and recovery; Network boundaries and protected communication; Identity, access and cryptographic protection; Cyber-risk identification and analysis; Continuity, backup and technical recovery. The CSSA ICS/SCADA Security Architect preparation case studies are 6 cases and about 1,039 words.
1A historian creates an unintended second route
A fictional plant separates an enterprise network from a process-control zone through a documented industrial boundary. A historian receives an additional network connection so office users can retrieve reports more easily.
150 words, under 1 min2A blocked command channel is not automatically a safe state
A fictional security team proposes a network rule that denies every message to a group of process controllers during an incident. The team has not consulted operators or control engineers and does not know how the equipment behaves when communication is lost.
159 words, under 1 min3A critical score does not define a production testing window
A fictional assessment identifies a severe vulnerability in a controller supporting a continuing industrial process. A scanner operator proposes running an exploit immediately to prove the finding, using a tool that worked on office servers.
154 words, under 1 min4A backup file exists but the recovery dependency is missing
A fictional plant keeps copies of several controller configuration files and a recent historian export. During a recovery exercise, the team discovers that an engineering tool version, a required licence and one network-service dependency are unavailable.
149 words, under 1 min5SaaS access after a role change
A fictional organization uses a managed collaboration service for internal planning documents. The provider maintains the application and underlying servers, while the organization configures users, groups and sharing settings.
221 words, about 1 min6A control comparison with explicit effectiveness and uncertainty
A fictional organization estimates the value exposed by one defined incident scenario at five hundred thousand currency units and the fraction lost in one successful incident at forty percent. Its classroom model estimates an annualized incident rate of one half, and the exercise asks for expected annual loss rather than a prediction that exactly half an incident occurs each year.
206 words, about 1 min