What is an ICS/SCADA risk and name two defensive strategies to mitigate it in a defense system?

• A. ICS/SCADA risk involves cyber-physical control networks; strategies: network segmentation and monitoring, secure remote access
• B. ICS/SCADA risk is solely about hardware failure in data centers
• C. ICS/SCADA risk relates to financial auditing of suppliers
• D. ICS/SCADA risk is resolved by standard firewall alone

Answer: (A)

ICS/SCADA risk centers on the vulnerabilities of cyber-physical control networks that operate defense system processes. When these networks are exposed to intrusions—whether through unauthorized access, tampering with control signals, or disruption of operations—the consequences can affect physical systems and mission readiness. The best defenses use multiple layers that address both the network and the devices themselves.

Two strong defensive strategies are network segmentation and monitoring, plus secure remote access. Segmentation creates separate zones for critical control equipment, isolating the most sensitive parts of the ICS/SCADA environment from less-trusted networks. This containment limits how far an attacker can move if one part is compromised. Monitoring provides continuous, real-time visibility into traffic and command patterns, enabling detection of unusual activity, policy violations, or anomalies that could indicate an intrusion or misconfiguration, so responders can act quickly. Secure remote access enhances protection for any legitimate external connections by enforcing strong authentication, encrypted channels, and tightly controlled, auditable access—reducing the risk that remote attackers can reach control components.

Other options miss the cyber-physical focus or rely on a single defense, which isn’t sufficient for ICS/SCADA environments.