CSSA ICS/SCADA Security Architect preparation study guide
CSSA ICS/SCADA Security Architect preparation · Work through your exam, one topic at a time.
This independent study page provides practice for CSSA ICS/SCADA Security Architect preparation. Its editorial learning areas include OT process context, trust boundaries and controlled connectivity; OT monitoring, change control, response and recovery; Network boundaries and protected communication; Identity, access and cryptographic protection; Cyber-risk identification and analysis; Continuity, backup and technical recovery. The CSSA ICS/SCADA Security Architect preparation study guide has 6 sections and about 3,533 words.
01OT process context, trust boundaries and controlled connectivity
Operational technology monitors or changes physical processes through devices such as controllers, sensors, actuators, engineering workstations and operator interfaces. A system diagram must connect the digital asset to its actual process function and consequences.
381 words, about 2 min02OT monitoring, change control, response and recovery
An asset inventory should identify the actual devices, versions, functions, owners and communication relationships needed for security decisions. Keep it current as equipment and service arrangements change.
388 words, about 2 min03Network boundaries and protected communication
This domain tests perimeter architecture and the device behaviour that makes segmentation real. Questions tend to be scenario-based: where a host belongs, which rule is needed, and what a given protocol actually protects.
430 words, about 2 min04Identity, access and cryptographic protection
This domain tests the identity lifecycle and the mechanisms that turn an identity into an authorised action. Expect questions that separate authentication from authorisation and that ask which access control model fits a scenario.
857 words, about 4 min05Cyber-risk identification and analysis
IT risk assessment has three phases. Identification builds the inventory: assets, processes, data flows, threats, vulnerabilities, and existing controls, often through risk scenarios ("who or what could exploit which vulnerability, and with what consequence?").
747 words, about 4 min06Continuity, backup and technical recovery
This domain tests continuity planning: how an organisation keeps critical services running during disruption and how it recovers afterwards. Distinguish the continuity plan from the disaster recovery plan and know the time-based metrics precisely.
730 words, about 4 min