NIST SP 800-82 Rev 3: OT and ICS Security Guide

Rev 3 themes

• ICS risk management and architecture
• Network segmentation / conduits
• Identity for engineering workstations
• Incident response with process safety partners

Monitoring

Collect historian, firewall, and engineering jump-host logs into an OT-aware SIEM use-case pack.

IT/OT boundary

Document DMZ patterns and change tickets that cross the boundary.

How CyberSilo Helps

• Evidence mapping in CyberSilo CSA
• Detection and logging proof with ThreatHawk SIEM
• Advisory scoping — contact CyberSilo

Frequently Asked Questions

Does 800-82 replace 800-53?

No — it specialises guidance for ICS; map to 800-53 where baselines apply.

Cloud OT?

Treat carefully — residency, latency, and vendor access matter.

Pakistan/GCC plants?

Pair with local baselines (PISF/NCA) plus 800-82 engineering practice.

Related Resources

• NIST hub
• ThreatHawk