GICSP Exam Preparation Material | Global Industrial Cyber Security Professional (GICSP)

Explanation:
Comprehensive and Detailed Explanation From Exact Extract:
LDAP (Lightweight Directory Access Protocol) is used to manage authentication and authorization services, controlling user access to systems and resources.
This function aligns with the Protect function (A) of the NIST Cybersecurity Framework (CSF), which focuses on access control, identity management, and protective technology to safeguard systems.
Identify (B) relates to asset management and risk assessment.
Respond (C) deals with incident response.
Detect (D) relates to discovering cybersecurity events.
GICSP maps LDAP implementation as a key protective control to ensure authorized access in ICS environments.
Reference: GICSP Official Study Guide, Domain: ICS Security Governance & Compliance NIST CSF Framework (Protect Function)
GICSP Training on Identity and Access Management

Explanation:
The recommended best practice is to use a shared Active Directory domain while deploying a Read-Only Domain Controller (RODC) within the Control system network (D) .
This approach:
Enables centralized management and authentication consistent with the business network
Limits the risk of domain controller compromise in the Control network because RODCs do not store sensitive password information and restrict changes
Balances security and operational efficiency by isolating sensitive environments while still leveraging AD’s capabilities
Options A and C increase complexity or risk by fully separating domains or controllers, while B reduces manageability by mixing domain and workgroup systems.
GICSP highlights RODCs as a means to secure domain services in ICS environments where full domain controllers pose a security risk.
Reference: GICSP Official Study Guide, Domain: ICS Security Governance & Compliance
Microsoft Active Directory Best Practices (Referenced in GICSP)
GICSP Training on Identity Management and Network Segmentation

Explanation:
The process described involves a defined quantity of ingredients being mixed and held for a fixed time before moving to the next step. This is a hallmark of a batch process.
Batch processes are executed in discrete lots or batches, where the process is started, controlled during the batch, and stopped or reset before the next batch.
Discrete processes (B) involve countable, separate units like assembled products.
Continuous processes (C) operate nonstop with steady conditions, common in chemical plants but not in batch brewing.
Distributed (D) refers to control architectures, not process type.
GICSP emphasizes the importance of understanding process types to tailor cybersecurity controls appropriate to their operational characteristics.
Reference: GICSP Official Study Guide, Domain: ICS Fundamentals & Operations ISA-88 Batch Control Standard
GICSP Training on Process Types and Control Strategies

Explanation:
A Guideline (A) provides general recommendations and best practices without mandatory requirements or detailed instructions.
Procedures (B) are step-by-step instructions for specific tasks.
Standards (C) specify mandatory requirements, often with measurable criteria.
Policies (D) establish high-level organizational directives and rules.
Martin’s document provides general, non-mandatory advice applicable broadly, fitting the definition of a guideline.
Reference: GICSP Official Study Guide, Domain: ICS Security Governance & Compliance
NIST SP 800-53 Rev 5 (Security Control Documentation Types)
GICSP Training on Security Documentation and Governance

Explanation:
A keyed lock is a delaying control (D) because it physically slows down or impedes unauthorized access to a facility, giving security personnel more time to respond.
Avoidant controls (A) prevent risk by eliminating it.
Responsive controls (B) act after an incident occurs.
Corrective controls (C) fix or restore systems after an incident.
GICSP emphasizes physical delaying controls as part of defense-in-depth strategies.
Reference: GICSP Official Study Guide, Domain: ICS Security Governance & Compliance
GICSP Training on Physical Security Controls