Study. uk . com
  1. Home
  2. All questions
  3. Question 13

CISSP study material · question 13 of 500

A small water utility runs office IT and plant operational technology with one three-person team. It has worked from version 1.0.1 of CISA's Cross-Sector Cybersecurity Performance Goals and is moving to version 2.0. Which changes in 2.0 shape how the team plans its work? Choose two.

  1. The goals become mandatory for critical infrastructure operators below a defined size threshold
  2. Operational technology goals move into a separate appendix maintained for regulated utilities
  3. Every goal carries cost, impact and implementation-difficulty ratings with the scoring logic published
  4. Information technology and operational technology goals merge into one set covering the whole estate
Show the answer

Answer: D. Information technology and operational technology goals merge into one set covering the whole estate
C. Every goal carries cost, impact and implementation-difficulty ratings with the scoring logic published

Version 2.0 fuses the previously separate IT and operational technology goals into one set and adds cost, impact and difficulty ratings with published scoring; the goals remain voluntary.

Source: CISA Cross-Sector Cybersecurity Performance Goals (CISA) — Cross-Sector Cybersecurity Performance Goals > Key Updates

Challenge yourself on this topic → Study as cards