Skip to main content

> GUIDE // FOUNDATIONS

NIST SP 800-82 Rev 3: Guide to Operational Technology (OT) Security

Engineering defense-in-depth, zero trust in industrial control, and safety-first incident response.

Executive Overview

NIST Special Publication 800-82 Revision 3 provides authoritative cybersecurity guidance tailored specifically for Industrial Control Systems (ICS), SCADA, DCS, and safety-instrumented systems.

1. Fundamental IT vs OT Differences: AIC vs CIA

Traditional IT prioritizes Confidentiality, then Integrity, then Availability (CIA). In OT environments, human safety and operational continuity invert this priority to Availability, Integrity, and Confidentiality (AIC):

  • An IT server reboot takes a corporate website offline for 2 minutes; a plant PLC reboot trips a 500 MW turbine or causes toxic chemical tank overpressurization.
  • Anti-malware software cannot suddenly quarantine a DLL file if that file controls real-time turbine governors.

Frequently Asked Questions

How does NIST SP 800-82 align with IEC 62443?

NIST SP 800-82 Rev 3 explicitly references and harmonizes with IEC 62443 zones, conduits, and foundational requirements.

AI Summary

NIST Special Publication 800-82 Revision 3 provides authoritative cybersecurity guidance tailored specifically for Industrial Control Systems (ICS), SCADA, DCS, and safety-instrumented systems.