OT Security Guidance: NIST Drafts Updated Guide, CISA/FBI Advise on ICS Integrators
NIST drafted an updated OT security guide while CISA and the FBI warned about risks from third-party ICS integrators.
NIST published a draft of Special Publication 800-82 Revision 4, Guide to Operational Technology (OT) Security, with comments due November 30, 2026. The revision broadens coverage to building automation, water, agriculture, freight rail, maritime, and industrial IoT-cloud convergence, and reorganizes guidance around NIST CSF 2.0, including zero trust and monitoring. CISA and the FBI separately warned operators to restrict third-party ICS integrator access. They cite a March–April 2025 intrusion at a US industrial automation company in which foreign actors staged nine archives containing 800 network schematics, device configurations, and customer records relevant to power and transportation customers.
- SP 800-82 Rev. 4 public comments are due November 30, 2026.
- Revision adds water, rail, maritime, and building-automation coverage.
- Guide is reorganized around NIST CSF 2.0 and zero trust.
- CISA and FBI say integrators should receive least privilege only.
- A 2025 intrusion staged 800 schematics and customer SCADA records.
- Countries
- United States
From the original article
2 min read at securityweek.com
Revision 4 of NIST’s operational technology security guide is open for public comments until November 30. The post OT Security Guidance: NIST Drafts Updated Guide, CISA/FBI Advise on ICS Integrators appeared first on SecurityWeek.
By Eduard Kovacs · securityweek.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.