Stouffer, K.
, Pease, M.
, Tang, C.
, Zimmerman, T.
, Pillitteri, V.
, Lightman, S.
, Hahn, A.
, Saravia, S.
, Sherule, A.
and Thompson, M.
(2023),
Guide to Operational Technology (OT) Security, Special Publication (NIST SP), National Institute of Standards and Technology, Gaithersburg, MD, [online], https://doi.org/10.6028/NIST.SP.800-82r3, https://tsapps.nist.gov/publication/get_pdf.cfm?pub_id=956505
(Accessed October 6, 2025)
| CARVIEW |
Select Language
HTTP/2 200
date: Tue, 07 Oct 2025 03:38:34 GMT
content-type: text/html; charset=UTF-8
content-encoding: gzip
cache-control: public, max-age=2764800
content-language: en
content-security-policy: default-src 'self'; script-src 'self' *.nist.gov js-agent.newrelic.com bam.nr-data.net bam-cell.nr-data.net gov-bam.nr-data.net 'unsafe-inline' 'unsafe-eval' www.google-analytics.com *.googletagmanager.com platform.twitter.com https://player.vimeo.com static.cloudflareinsights.com https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline' *.nist.gov fonts.googleapis.com *.typekit.net; img-src 'self' 'unsafe-inline' data: *.nist.gov *.google-analytics.com *.googletagmanager.com cdnsecakmi.kaltura.com nist-el-nfrlhrr.s3.amazonaws.com https://cdn.jsdelivr.net/npm/leaflet-fullscreen@1.0.2/dist/fullscreen@2x.png https://cdn.jsdelivr.net/npm/leaflet-fullscreen@1.0.2/dist/fullscreen.png api.mapbox.com syndication.twitter.com https://h5p.org https://i.vimeocdn.com; media-src 'self' nist-el-nfrlhrr.s3.amazonaws.com; frame-src 'self' tube.nist.gov sts.nist.gov sts2.nist.gov *.kaltura.com *.youtube.com *.arcgis.com https://platform.twitter.com/ https://player.vimeo.com *.bluejeans.com https://vimeo.com/ https://time.gov/ login.nist.gov https://customer-ltx6ylk10sje63q6.cloudflarestream.com https://challenges.cloudflare.com; frame-ancestors 'self'; child-src 'self' blob: tube.nist.gov sts.nist.gov sts2.nist.gov *.kaltura.com *.youtube.com *.arcgis.com *.time.gov login.nist.gov; font-src 'self' *.nist.gov fonts.googleapis.com fonts.gstatic.com *.typekit.net data:; connect-src 'self' bam.nr-data.net bam-cell.nr-data.net gov-bam.nr-data.net *.google-analytics.com *.analytics.google.com *.googletagmanager.com; report-uri /report-csp-violation; upgrade-insecure-requests
expires: Sun, 19 Nov 1978 05:00:00 GMT
last-modified: Mon, 06 Oct 2025 22:51:42 GMT
strict-transport-security: max-age=31536000
vary: Cookie,Accept-Encoding
via: varnish
x-ah-environment: prod
x-cache: MISS
x-content-type-options: nosniff
x-drupal-cache: HIT
x-frame-options: SAMEORIGIN
x-generator: Drupal 10 (https://www.drupal.org)
x-request-id: 745026be-1161-4f0d-9c03-44962dcd3c28
cf-cache-status: HIT
age: 12184
set-cookie: __cf_bm=Q2z7Tk2pKNBcW2ve3UUhQ54zNB40375aoxwvOi8EFog-1759808314-1.0.1.1-GouhhFty9cWPd6BQ449yWp0yO36nj5Mo5JSSC4GKW3ltVCzC2GEc.40c8XjXblwyg18vGshPGetV_zTBGeGbisls5M06X6NraqPumJQZokI; path=/; expires=Tue, 07-Oct-25 04:08:34 GMT; domain=.nist.gov; HttpOnly; Secure; SameSite=None
set-cookie: _cfuvid=fr2ovLmGl0IFHvGc51TMxua_GXxlVubb_rQG_6A_Q8U-1759808314614-0.0.1.1-604800000; path=/; domain=.nist.gov; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 98aa5dce2da2061e-IAD
Guide to Operational Technology (OT) Security | NIST
Skip to main content
NOTICE: Due to a lapse in annual appropriations, most of this website is not being updated. Learn more.
Form submissions will still be accepted but will not receive responses at this time. Sections of this site for programs using non-appropriated funds (such as NVLAP) or those that are excepted from the shutdown (such as CHIPS and NVD) will continue to be updated.
An official website of the United States government
Here’s how you know
Official websites use .gov
A .gov website belongs to an official government organization in the United States.
Secure .gov websites use HTTPS
A lock (
) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.
https://www.nist.gov/publications/guide-operational-technology-ot-security
Guide to Operational Technology (OT) Security
Published
Author(s)
Keith A. Stouffer, Michael Pease, CheeYee Tang, Timothy Zimmerman, Victoria Yan Pillitteri, Suzanne Lightman, Adam Hahn, Stephanie Saravia, Aslam Sherule, Michael Thompson
Abstract
This document provides guidance on how to secure operational technology (OT) while addressing their unique performance, reliability, and safety requirements. OT encompasses a broad range of programmable systems and devices that interact with the physical environment (or manage devices that interact with the physical environment). These systems and devices detect or cause a direct change through the monitoring and/or control of devices, processes, and events. Examples include industrial control systems, building automation systems, transportation systems, physical access control systems, physical environment monitoring systems, and physical environment measurement systems. The document provides an overview of OT and typical system topologies, identifies common threats and vulnerabilities to these systems, and provides recommended security countermeasures to mitigate the associated risks.Citation
Special Publication (NIST SP) - 800-82r3
Report Number
800-82r3
NIST Pub Series
Pub Type
NIST Pubs
Download Paper
Keywords
computer security, distributed control systems (DCS), industrial control systems (ICS), information security, network security, operational technology (OT), programmable logic controllers (PLC), risk management, security controls, supervisory control and data acquisition (SCADA) systems.
Citation
Issues
If you have any questions about this publication or are having problems accessing it, please contact [email protected].
Created September 28, 2023