Overview
What is NIST SP 800-82 rev3 ?
NIST SP 800-82 révision 3 is the reference guide for Industrial Control Systems (ICS) security, including SCADA (Supervisory Control and Data Acquisition) systems, Distributed Control Systems (DCS), and Programmable Logic Controllers (PLC). The document provides recommendations for securing OT (Operational Technology) environments while accounting for the specific constraints of availability, real-time operation, and physical safety inherent to industrial systems.
Key Points
- Covers SCADA, DCS, PLC systems and industrial network architectures
- Network segmentation recommendations between IT and OT zones (Purdue model)
- Risk management specific to industrial environments: availability over confidentiality
- Recommendations for patch management and updates in critical environments
- Integration with NIST 800-53 and IEC 62443 for a defense-in-depth approach
Why Zaxyr
Zaxyr helps industrial organizations assess their NIST 800-82 compliance by automating evidence collection from OT environments. The platform provides mapping to IEC 62443 and NERC CIP, and enables tracking of industrial security control maturity in a unified IT/OT dashboard.