NIST Releases Draft Guide to Operational Technology Security
The proposed revision incorporates Cybersecurity Framework 2.0 and adds material on monitoring, system architecture and zero trust.
- By Danielle Naidu
- Sep 23, 2026
The National Institute of Standards and Technology (NIST) has opened public review of Special Publication 800-82 Revision 4, an updated draft of its operational technology security guidance. Comments are due Nov. 30.
NIST applies the guidance to systems that monitor or control equipment, physical processes and events, including industrial control, transportation, physical access control and physical environmental monitoring systems.
The agency reorganized the guide around Cybersecurity Framework 2.0, connected OT risk with enterprise risk management and added discussion of the NIST Risk Management Framework. It also expanded guidance on asset management, network monitoring and detection, system architecture and zero trust principles.
NIST broadened the guide's sector coverage to include Building Automation and Control Systems, water and wastewater operations, food and agriculture, freight rail and maritime vessels. The draft also addresses OT's convergence with the Industrial Internet of Things and cloud environments.
About the Author
Danielle Naidu is assistant editor for Security Today, Campus Security Today, Occupational Health & Safety and Environmental Protection Online.