Question 27

Explanation

ISA/IEC 62443 specifies roles for different stakeholders involved in the IACS Cybersecurity Lifecycle: The integration provider is responsible for the design and deployment of the automation solution. They generally start work during the design phase and conclude with a handoff of the system to the asset owner. Their activities include analysis, component selection, development, installation, configuration, and testing. The maintenance service provider is responsible for maintenance part after the automation solution has been handed over to the asset owner. The maintenance provider generally provides support after the handoff of the system. Their activities include software patching and updates, component upgrades and maintenance, change management, etc. The asset owner is responsible for operating the IACS and is accountable for everything that happens inside the industrial automation and control system. The product supplier is responsible for developing and supporting generic components which the system integrator can use to create the automation solution.