NIST Special Publication 800-82 Revision 3 broadened its scope compared to earlier revisions. Which title best reflects the Revision 3 focus?
- A.Guide to Industrial Control Systems (ICS) Security, limited to SCADA and DCS
- B.Framework for Improving Critical Infrastructure Cybersecurity
- C.Guide to Operational Technology (OT) Security, covering a broad range of OT including ICS, building automation, and more
- D.Security and Privacy Controls for Information Systems and Organizations
Why C is correct
NIST SP 800-82 Rev. 3 was retitled Guide to Operational Technology (OT) Security, expanding from the ICS-specific scope of earlier revisions to encompass the wider OT landscape including building automation and other cyber-physical systems. It also aligns its control overlay with SP 800-53.
Know someone studying for OT Security Fundamentals? Send them this one.