NIST Updates OT Security Guide, CISA and FBI Warn on ICS Integrator Risks
The National Institute of Standards and Technology (NIST) has released a draft update to its operational technology (OT) security guide, Special Publication 800-82 Revision 4. This revision expands the guide's scope to include sectors such as building automation, water and wastewater systems, food and agriculture, freight rail, and maritime vessels, and addresses the convergence of industrial IoT and cloud technologies. The updated guide is now structured around NIST Cybersecurity Framework 2.0, with a re-focused risk management section emphasizing the framework's Govern function. Concurrently, the Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) have issued a fact sheet advising critical infrastructure owners and operators to exercise caution when working with third-party industrial control system (ICS) integrators. They highlight the risks associated with granting excessive access or control over industrial processes, citing an incident where foreign c...
