SCADA setpoint files that keep water treatment stable are far more critical than marketing PDFs on the public website. How should protections differ?
Select an answer to reveal the explanation.
Short Explanation
The setpoints that keep drinking water safe are the crown jewels; the ‘Summer Concerts!’ PDF is a flyer. Crank integrity and availability up for the jewels. Matching flyer-level controls to SCADA is backwards.
Full Explanation
Criticality drives how strongly you protect integrity and availability. SCADA setpoints that govern water treatment or distribution are operationally critical: unauthorized changes or downtime can endanger public health. Those values deserve stronger integrity controls (change authentication, logging, dual control) and availability design (redundancy, tested recovery) than public marketing PDFs about summer concerts.
Protecting marketing PDFs more strictly than SCADA because websites are public inverts risk. Applying identical minimal controls “to simplify policy” ignores differentiated impact. Leaving SCADA setpoints world-writable from any operator PC without accountability invites mistakes and sabotage.
Exam caveat: confidentiality, integrity, and availability are weighted per asset. Public marketing content may need low confidentiality but still basic integrity; OT setpoints often prioritize integrity and availability even when the values themselves are not secret documents.
Operational check: classify OT parameters separately from public affairs files, lock engineering change paths behind authenticated engineering workstations, monitor setpoint modifications, and verify backups and failover for SCADA configuration—not only for brochure websites.