NIST Special Publication 800-82 Revision 3, titled “Guide to Operational Technology (OT) Security,” provides comprehensive guidance on securing operational technology systems, which include a wide range of programmable devices and systems that interact with the physical environment, such as industrial control systems (ICS), building automation, transportation, and physical access control systems. This revision expands the scope from traditional ICS to all OT, reflecting the growing integration of cyber-physical systems and the increased exposure of connected devices across various sectors. The document offers an overview of OT architectures, identifies typical threats and vulnerabilities, and recommends safeguards and countermeasures to manage associated risks. Key updates in Revision 3 include enhanced risk management frameworks, alignment with the NIST Cybersecurity Framework, guidance on incident response and supply chain security, and tailored security control baselines for OT systems of varying impact levels. The publication is designed to help organizations improve the security, reliability, and safety of their OT environments while addressing evolving threats and regulatory requirements.
Publication's URL
https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/finalAdditional documents on this topic
- NIST IR 8349 Methodology for Characterizing Network Behavior of Internet of Things Devices
- CIS Controls Internet of Things Companion Guide ★★★★★
- CISA Primary Mitigations to Reduce Cyber Threats to Operational Technology
- CISA Principles for the Secure Integration of Artificial Intelligence in Operational Technology
- NIST SP 800-88 Rev. 2 Guidelines for Media Sanitization