NIST Updates OT Security Guide, CISA and FBI Advise on ICS Integrator Risks
The National Institute of Standards and Technology (NIST) has released a draft update to its operational technology (OT) security guide, Special Publication 800-82 Revision 4, titled 'Guide to Operational Technology (OT) Security.' This revision expands the guide's sector coverage to include building automation, water and wastewater systems, food and agriculture, freight rail, and maritime vessels, and integrates industrial IoT and cloud convergence. The updated guide is structured around NIST Cybersecurity Framework 2.0 and offers expanded guidance on implementing OT security controls, asset management, network monitoring, and zero trust principles. Concurrently, the Cybersecurity and Infrastructure Security Agency (CISA) and the FBI have issued a fact sheet advising critical infrastructure owners and operators on the risks associated with third-party industrial control system (ICS) integrators, urging caution when granting high levels of access and emphasizing the principle of least privilege.