[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:nist-sp\u002F800-82":3},{"item":4,"lessons":16,"controls":66,"related":97},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"nist-sp","800-82","SP 800-82","SP 800-82 Rev. 3: Guide to Operational Technology (OT) Security",369,"US National Institute of Standards and Technology (NIST)","**What it covers.** NIST guidance on securing operational technology such as industrial control systems, SCADA, building management and other systems that interact with the physical world. It explains typical OT architectures and threats, and shows how to apply a tailored security baseline while respecting safety, availability and performance needs.\n\n**In practice.** Good practice starts with an OT asset inventory and network architecture that separates OT from enterprise IT, with controlled conduits and monitored remote access. Changes and patches are tested with operations and safety staff before deployment, and incident response plans cover physical processes and manual operation. Evidence includes zone diagrams, access logs for vendor connections and records of risk assessments that consider safety impact.\n\n**Common gaps.** Common shortfalls are flat networks between IT and OT, unmanaged vendor remote access, unknown legacy devices and incident plans written only for IT systems.",null,"https:\u002F\u002Fcsrc.nist.gov\u002Fpubs\u002Fsp\u002F800\u002F82\u002Fr3\u002Ffinal","Read the publication at NIST","2026-10-18T15:18:43.663+00:00",{"total":9,"list":17},[18,22,26,30,34,38,42,46,50,54,58,62],{"slug":19,"title":20,"published_at":21},"ai-compromises-robotic-arm-in-16-minutes-exposing-ot-security-gaps","AI Compromises Robotic Arm in 16 Minutes, Exposing OT Security Gaps","2026-10-16T20:20:16.394+00:00",{"slug":23,"title":24,"published_at":25},"ics-sniper-xworm-rce-and-ai-introduced-software-flaws-highlight-diverse-attack-surface","ICS-Sniper, XWorm RCE, and AI-Introduced Software Flaws Highlight Diverse Attack Surface","2026-10-16T16:20:31.539+00:00",{"slug":27,"title":28,"published_at":29},"multiple-critical-vulnerabilities-found-in-cisa-malcolm-network-traffic-analyzer","Multiple Critical Vulnerabilities Found in CISA Malcolm Network Traffic Analyzer","2026-10-15T18:22:08.348+00:00",{"slug":31,"title":32,"published_at":33},"eclipse-milo-vulnerabilities-enable-data-loss-impersonation-and-dos","Eclipse Milo Vulnerabilities Enable Data Loss, Impersonation, and DoS","2026-10-15T18:21:51.861+00:00",{"slug":35,"title":36,"published_at":37},"small-ai-models-could-enable-self-propagating-ai-worms-by-2026","Small AI Models Could Enable Self-Propagating AI Worms by 2026","2026-10-15T14:20:39.044+00:00",{"slug":39,"title":40,"published_at":41},"end-of-life-ot-devices-enable-supermarket-refrigeration-cyberattack","End-of-Life OT Devices Enable Supermarket Refrigeration Cyberattack","2026-10-15T14:20:22.449+00:00",{"slug":43,"title":44,"published_at":45},"unpatched-fridge-firmware-costs-eu-grocers-millions","Unpatched Fridge Firmware Costs EU Grocers Millions","2026-10-15T08:20:19.544+00:00",{"slug":47,"title":48,"published_at":49},"ivanti-ics-zero-day-exposes-vendor-patching-gaps-in-critical-infrastructure","Ivanti ICS Zero-Day Exposes Vendor Patching Gaps in Critical Infrastructure","2026-10-14T22:20:35.194+00:00",{"slug":51,"title":52,"published_at":53},"ai-agents-can-compromise-ot-systems-and-move-physical-equipment-in-under-17-minutes","AI Agents Can Compromise OT Systems and Move Physical Equipment in Under 17 Minutes","2026-10-14T18:21:46.77+00:00",{"slug":55,"title":56,"published_at":57},"critical-ics-vulnerabilities-demand-urgent-patching-across-industrial-vendors","Critical ICS Vulnerabilities Demand Urgent Patching Across Industrial Vendors","2026-10-14T16:20:20.989+00:00",{"slug":59,"title":60,"published_at":61},"privilege-escalation-flaw-in-ignition-scada-software-demands-immediate-patching","Privilege Escalation Flaw in Ignition SCADA Software Demands Immediate Patching","2026-10-14T00:21:48.311+00:00",{"slug":63,"title":64,"published_at":65},"self-replicating-ai-models-pose-emerging-botnet-threat-to-iot-devices","Self-Replicating AI Models Pose Emerging Botnet Threat to IoT Devices","2026-10-13T22:21:14.479+00:00",[67,72,77,82,87,92],{"slug":68,"name":69,"problem":70,"stories":71},"ot-security","OT and industrial control system security","Factory, building and utility control systems get visibility and protection.",261,{"slug":73,"name":74,"problem":75,"stories":76},"patch-management","Automated patch management","Known holes get closed in days, not months.",200,{"slug":78,"name":79,"problem":80,"stories":81},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",153,{"slug":83,"name":84,"problem":85,"stories":86},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",123,{"slug":88,"name":89,"problem":90,"stories":91},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",47,{"slug":93,"name":94,"problem":95,"stories":96},"asset-inventory","Cyber asset inventory","You cannot patch, monitor or protect the devices, cloud resources and accounts you do not know you have.",29,[98,104,109,115,121,126,131,137],{"family":99,"item":100,"code":101,"title":102,"together":103},"cis","12","Control 12","Network Infrastructure Management",268,{"family":99,"item":105,"code":106,"title":107,"together":108},"7","Control 7","Continuous Vulnerability Management",243,{"family":110,"item":111,"code":112,"title":113,"together":114},"iec-62443","3-3","62443-3-3","IEC 62443-3-3: System security requirements and security levels",172,{"family":116,"item":117,"code":118,"title":119,"together":120},"nist-800-53","si-2","SI-2","Flaw Remediation",148,{"family":122,"item":123,"code":124,"title":124,"together":125},"itil","overview","ITIL",127,{"family":99,"item":127,"code":128,"title":129,"together":130},"13","Control 13","Network Monitoring and Defense",119,{"family":132,"item":133,"code":134,"title":135,"together":136},"nerc-cip","cip-007","CIP-007-6","CIP-007: Systems Security Management",106,{"family":99,"item":138,"code":139,"title":140,"together":141},"4","Control 4","Secure Configuration of Enterprise Assets and Software",97]