NIST Releases Guide for Industrial Control Systems Security

ARCwire - NIST is pleased to announce the public comment release of draft Special Publication (SP) 800-82, Guide to Supervisory Control and Data Acquisition (SCADA) and Industrial Control Systems Security. SP 800-82 provides guidance for establishing secure industrial control systems (ICS), including SCADA systems, distributed control systems, and other smaller control system configurations, such as skid-mounted programmable logic controllers. ICSs are typically used in industries such as electric, water, oil and gas, transportation, chemical, pharmaceutical, pulp and paper, food and beverage, and discrete manufacturing (automotive, aerospace, and durable goods). The document provides an overview of ICSs and typical system topologies, identifies typical threats and vulnerabilities to these systems, and provides recommended security countermeasures to mitigate the associated risks.

NIST SP 800-82 and other NIST SP 800 documents are available from the NIST Computer Security Division's Computer Security Resource Center.

NIST SP 800-82 (Adobe PDF 2273KB) can be directly downloaded at from the agency's Web site.

A Zip file (1726 KB) containing NIST SP 800-82 is also available by clicking here.

NIST requests comments on SP 800-82 by December 22, 2006. Please submit comments to [email protected] with "Comments SP800-82" in the subject line.