The US National Institute of Standards and Technology (NIST) has published the initial public draft of SP 800-82 Rev. 4, Guide to Operational Technology (OT) Security.
Key changes
- Restructured around the NIST Cybersecurity Framework (CSF) 2.0.
- Expanded sector coverage, including building automation, water, food and agriculture, rail, and maritime.
- Stronger guidance on asset management, network monitoring, and zero trust in OT environments.
- Comments are invited until 30 November 2026.
Although a US publication, SP 800-82 is widely used internationally. UK operators preparing for the Cyber Security and Resilience Bill, or working to the NCSC Cyber Assessment Framework, may find it a useful reference for OT controls.
Source: NIST news release
Need help understanding what this change means for your organisation? Get in touch for a pragmatic, no-obligation conversation.
