PCN PEP flashcards
PCN PEP · Build recall with a focused review session.
32 cards. Read the term and the definition here. The deck at the top of this page is optional.
- Purdue Model Level 0
- The physical process layer containing sensors, actuators, valves, motors, and the equipment that directly interacts with the industrial process.
- OT CIA priority
- In operational technology, availability is prioritized above integrity and confidentiality because safety and continuous production are the primary objectives.
- Safety Instrumented System
- An independent control system that monitors process conditions and drives the process to a safe state when interlock limits are exceeded, separate from the basic process control system.
- RTU versus PLC
- An RTU is designed for remote telemetry over low-bandwidth links, while a PLC is designed for high-speed local discrete and analog control on the plant floor.
- Modbus/TCP port
- Modbus/TCP uses TCP port 502 and provides no authentication or encryption, making it a common target for unauthorized coil and register writes.
- DNP3 secure authentication
- DNP3 Secure Authentication (SAv5) adds challenge-response integrity and optional encryption to the master-outstation protocol, preventing spoofed control commands.
- EtherNet/IP CIP Security
- CIP Security adds TLS and DTLS to EtherNet/IP, providing integrity and confidentiality for explicit messaging and implicit I/O traffic between devices.
- OPC UA security
- OPC UA uses X.509 certificates, message signing, and encryption on TCP port 4840, with an information model that exposes nodes and references to clients.
- PROFINET IRT
- Isochronous Real-Time is a PROFINET mode that provides deterministic sub-millisecond cycles for motion control by reserving bandwidth and synchronizing devices.
- IEC 61850 GOOSE
- GOOSE is a Layer 2 multicast protocol in substation automation for fast protection trips, bypassing TCP/IP to achieve millisecond latency.
- OT DMZ
- A demilitarized zone between enterprise and control networks that terminates all IT-to-OT sessions and prevents direct routing into Level 2 or lower.
- Data diode
- A unidirectional gateway that enforces one-way data flow from OT to IT, preventing inbound command and control traffic into the control network.
- Zone and conduit
- An IEC 62443 grouping of assets with common security requirements (zone) connected by controlled communication paths (conduits) with documented protocols and ports.
- VLAN security limitation
- VLANs provide Layer 2 separation but are not a security boundary without inter-VLAN ACLs or firewalls, because VLAN hopping and trunk abuse are possible.
- Passive OT monitoring
- Using SPAN ports or network TAPs to observe OT traffic without injecting packets, avoiding disruption to fragile controllers that active scanning can cause.
- IEC 62443 foundational requirements
- Seven requirements: identification and authentication control, use control, system integrity, data confidentiality, restricted data flow, timely response to events, and resource availability.
- Security Level SL4
- The highest IEC 62443 security level, defined as protection against intentional attacks using sophisticated means with extended resources, such as state-sponsored actors.
- Application whitelisting
- An endpoint control that permits only approved executables to run, effectively blocking unknown malware on fixed-function HMIs and engineering workstations.
- OT patch cycle
- A test-then-deploy process: vendor advisory review, lab validation, maintenance window scheduling, rollback plan, deployment, and post-patch verification.
- Least privilege in OT
- Separating operator, engineer, and administrator accounts so each role has only the access needed, eliminating shared generic logins on engineering workstations.
- HAZOP study
- A systematic risk assessment that examines deviations from design intent using guide words such as no, more, less, reverse, and other to identify hazards.
- LOPA
- Layer of Protection Analysis quantifies independent protection layers to determine whether risk is reduced to as low as reasonably practicable (ALARP).
- NERC CIP
- Mandatory reliability standards for bulk electric systems covering asset categorization, electronic security perimeters, system security management, and configuration change management.
- Risk treatment options
- The four choices for handling identified risk: mitigate with controls, transfer to insurance or contract, avoid the activity, or accept with documented management sign-off.
- OT intrusion detection
- Industrial IDS baselines normal protocol behavior and flags anomalies such as new assets, unauthorized commands, program downloads, and firmware changes.
- OT incident containment
- Isolating affected OT assets while confirming safety and manual operation, because disconnecting a compromised HMI may halt production or disable protection.
- Incident response lifecycle
- The phases of preparation, detection and analysis, containment, eradication, recovery, and lessons learned, documented in OT-specific playbooks.
- OT forensic evidence
- Network packet captures are often the primary evidence in OT because many PLCs and RTUs lack logging, supplemented by controller memory and configuration captures.
- OT change management
- A controlled process of request, risk review, test plan, approval, scheduled window, implementation, verification, and documentation for every OT change.
- Configuration backup testing
- Storing PLC, HMI, switch, and firewall configurations offline and periodically proving restore capability, because an untested backup is not a control.
- OT asset inventory
- A record of make, model, firmware version, network address, owner, location, and end-of-support date for every OT device to support lifecycle planning.
- Secure decommissioning
- The lifecycle phase that includes data sanitization, credential revocation, network removal, and physical destruction of storage media where required.