{"id":1336,"date":"2023-12-11T14:17:07","date_gmt":"2023-12-11T14:17:07","guid":{"rendered":"https:\/\/anchoram.webedge.com.au\/?p=1336"},"modified":"2024-05-10T13:18:24","modified_gmt":"2024-05-10T03:18:24","slug":"nist-800-82-the-quiet-achiever","status":"publish","type":"post","link":"https:\/\/anchoramconsulting.com\/au\/blog\/2023\/12\/11\/nist-800-82-the-quiet-achiever\/","title":{"rendered":"NIST 800-82: The Quiet Achiever"},"content":{"rendered":"<p>The previous standard released in 2013 was very much seen as the penultimate guidance for OT Security for some time. Although the more structural standards such as IEC 62443 are useful for comprehensive approaches for a point in time or brownfields guidance, NIST 800-82 provided an excellent point of reference.<\/p>\n<p>Over time, the standard has evolved to offer more prescriptive and detailed guidance, facilitating a nuanced understanding of the differences between IT and OT security requirements. This includes specific steps required to implement core controls such as segmentation, protocol restrictions and technical configurations across firewalls.<\/p>\n<h4>What has changed with 800-82 v3?<\/h4>\n<p>So, is the 800-82 v3 an improvement?<\/p>\n<p>The change in terminology is an important start, replacing the term &#8216;Industrial Control Systems (ICS)&#8217; with &#8216;Operational Technology (OT)&#8217; in the title and throughout the document.<\/p>\n<p>This is also the same for &#8216;ICS Operation and Components&#8217;, replaced by &#8216;OT Operation, Architectures and Components&#8217; and covers the additional systems that have been orphaned for some time:<\/p>\n<ul>\n<li>Building Automation Systems<\/li>\n<li>Physical Access Control Systems<\/li>\n<li>Safety Systems<\/li>\n<li>Industrial Internet of Things<\/li>\n<\/ul>\n<p>These new system types are areas that have grown and evolved in terms of threats and recorded cyber incidents over the years since the first standard was released.<\/p>\n<p>Structurally the six foundational sections for Risk Management for OT systems and OT Cybersecurity Program Development have undergone reorganisation, with &#8216;Security&#8217; from the second version now termed &#8216;Cybersecurity&#8217;.<\/p>\n<p>For the main updates, sections cover Information Security actions including risk management and are aligned with the NIST Cybersecurity Framework which was overlooked in the initial document.<\/p>\n<p>Importantly, recommendations are aligned with the NIST CSF: Identify, Protect, Detect, Respond, and Recover.<\/p>\n<p>The improved layout of the new standards significantly improves readability, catering to individuals without an OT background. This enhancement is pivotal as the industry&#8217;s heightened focus on security necessitates a standard that is accessible to a broader audience.<\/p>\n<h4>Where to now?<\/h4>\n<p>In summary, NIST 800-82 introduces substantial uplifts, providing specific guidance across emerging areas of technology while refining and aligning with other NIST publications.<\/p>\n<p>In terms of standards that bang the drum, 800-82 doesn\u2019t get as much limelight as others such as IEC 62443 but this standard still quietly achieves a robust and well-thought-out structure to uplift OT security.<\/p>\n<p>Looking ahead, for those seeking resources and expertise aligned with these technical standards, Anchoram stands ready to assist. Offering an integrated security approach to Risk and Technical Controls, our staff possess deep knowledge of Operational Technologies and Critical Infrastructure assets, ensuring a comprehensive and effective response to evolving security challenges.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Several months ago, the third version of the Guide to Operational Technology (OT) Security, SP 800-82 Rev. 3 was released &#8211; a welcome change to the security guidance on OT published by NIST.<\/p>\n","protected":false},"author":7,"featured_media":1616,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[20],"tags":[],"class_list":["post-1336","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.0 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>NIST 800-82: The Quiet Achiever - Anchoram Australia<\/title>\n<meta name=\"description\" content=\"Although standards such as IEC 62443 are useful for comprehensive approaches, NIST 800-82 provided an excellent point of reference.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/anchoramconsulting.com\/au\/blog\/2023\/12\/11\/nist-800-82-the-quiet-achiever\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"NIST 800-82: The Quiet Achiever - Anchoram Australia\" \/>\n<meta property=\"og:description\" content=\"Although standards such as IEC 62443 are useful for comprehensive approaches, NIST 800-82 provided an excellent point of reference.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/anchoramconsulting.com\/au\/blog\/2023\/12\/11\/nist-800-82-the-quiet-achiever\/\" \/>\n<meta property=\"og:site_name\" content=\"Anchoram Australia\" \/>\n<meta property=\"article:published_time\" content=\"2023-12-11T14:17:07+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-05-10T03:18:24+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/anchoramconsulting.com\/au\/wp-content\/uploads\/sites\/2\/2024\/01\/NIST_800-82_quiet_achiever-min.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"915\" \/>\n\t<meta property=\"og:image:height\" content=\"480\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Anchoram Consulting\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Anchoram Consulting\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/anchoramconsulting.com\\\/au\\\/blog\\\/2023\\\/12\\\/11\\\/nist-800-82-the-quiet-achiever\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/anchoramconsulting.com\\\/au\\\/blog\\\/2023\\\/12\\\/11\\\/nist-800-82-the-quiet-achiever\\\/\"},\"author\":{\"name\":\"Anchoram Consulting\",\"@id\":\"https:\\\/\\\/anchoramconsulting.com\\\/au\\\/#\\\/schema\\\/person\\\/1a3072848bd1a696ca298dacd5e4a148\"},\"headline\":\"NIST 800-82: The Quiet Achiever\",\"datePublished\":\"2023-12-11T14:17:07+00:00\",\"dateModified\":\"2024-05-10T03:18:24+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/anchoramconsulting.com\\\/au\\\/blog\\\/2023\\\/12\\\/11\\\/nist-800-82-the-quiet-achiever\\\/\"},\"wordCount\":426,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/anchoramconsulting.com\\\/au\\\/blog\\\/2023\\\/12\\\/11\\\/nist-800-82-the-quiet-achiever\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/anchoramconsulting.com\\\/au\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2024\\\/01\\\/NIST_800-82_quiet_achiever-min.jpg\",\"articleSection\":[\"Security\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/anchoramconsulting.com\\\/au\\\/blog\\\/2023\\\/12\\\/11\\\/nist-800-82-the-quiet-achiever\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/anchoramconsulting.com\\\/au\\\/blog\\\/2023\\\/12\\\/11\\\/nist-800-82-the-quiet-achiever\\\/\",\"url\":\"https:\\\/\\\/anchoramconsulting.com\\\/au\\\/blog\\\/2023\\\/12\\\/11\\\/nist-800-82-the-quiet-achiever\\\/\",\"name\":\"NIST 800-82: The Quiet Achiever - Anchoram Australia\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/anchoramconsulting.com\\\/au\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/anchoramconsulting.com\\\/au\\\/blog\\\/2023\\\/12\\\/11\\\/nist-800-82-the-quiet-achiever\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/anchoramconsulting.com\\\/au\\\/blog\\\/2023\\\/12\\\/11\\\/nist-800-82-the-quiet-achiever\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/anchoramconsulting.com\\\/au\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2024\\\/01\\\/NIST_800-82_quiet_achiever-min.jpg\",\"datePublished\":\"2023-12-11T14:17:07+00:00\",\"dateModified\":\"2024-05-10T03:18:24+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/anchoramconsulting.com\\\/au\\\/#\\\/schema\\\/person\\\/1a3072848bd1a696ca298dacd5e4a148\"},\"description\":\"Although standards such as IEC 62443 are useful for comprehensive approaches, NIST 800-82 provided an excellent point of reference.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/anchoramconsulting.com\\\/au\\\/blog\\\/2023\\\/12\\\/11\\\/nist-800-82-the-quiet-achiever\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/anchoramconsulting.com\\\/au\\\/blog\\\/2023\\\/12\\\/11\\\/nist-800-82-the-quiet-achiever\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/anchoramconsulting.com\\\/au\\\/blog\\\/2023\\\/12\\\/11\\\/nist-800-82-the-quiet-achiever\\\/#primaryimage\",\"url\":\"https:\\\/\\\/anchoramconsulting.com\\\/au\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2024\\\/01\\\/NIST_800-82_quiet_achiever-min.jpg\",\"contentUrl\":\"https:\\\/\\\/anchoramconsulting.com\\\/au\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2024\\\/01\\\/NIST_800-82_quiet_achiever-min.jpg\",\"width\":915,\"height\":480,\"caption\":\"Graphic animation of secure servers\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/anchoramconsulting.com\\\/au\\\/blog\\\/2023\\\/12\\\/11\\\/nist-800-82-the-quiet-achiever\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/anchoramconsulting.com\\\/au\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"NIST 800-82: The Quiet Achiever\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/anchoramconsulting.com\\\/au\\\/#website\",\"url\":\"https:\\\/\\\/anchoramconsulting.com\\\/au\\\/\",\"name\":\"Anchoram Australia\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/anchoramconsulting.com\\\/au\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/anchoramconsulting.com\\\/au\\\/#\\\/schema\\\/person\\\/1a3072848bd1a696ca298dacd5e4a148\",\"name\":\"Anchoram Consulting\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/3d61e9ba8bbdaceb8c2a6173b04c9249290e50a1043eeb788089e1dca62377c3?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/3d61e9ba8bbdaceb8c2a6173b04c9249290e50a1043eeb788089e1dca62377c3?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/3d61e9ba8bbdaceb8c2a6173b04c9249290e50a1043eeb788089e1dca62377c3?s=96&d=mm&r=g\",\"caption\":\"Anchoram Consulting\"},\"url\":\"https:\\\/\\\/anchoramconsulting.com\\\/au\\\/blog\\\/profiles\\\/anchoram-consulting\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"NIST 800-82: The Quiet Achiever - Anchoram Australia","description":"Although standards such as IEC 62443 are useful for comprehensive approaches, NIST 800-82 provided an excellent point of reference.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/anchoramconsulting.com\/au\/blog\/2023\/12\/11\/nist-800-82-the-quiet-achiever\/","og_locale":"en_US","og_type":"article","og_title":"NIST 800-82: The Quiet Achiever - Anchoram Australia","og_description":"Although standards such as IEC 62443 are useful for comprehensive approaches, NIST 800-82 provided an excellent point of reference.","og_url":"https:\/\/anchoramconsulting.com\/au\/blog\/2023\/12\/11\/nist-800-82-the-quiet-achiever\/","og_site_name":"Anchoram Australia","article_published_time":"2023-12-11T14:17:07+00:00","article_modified_time":"2024-05-10T03:18:24+00:00","og_image":[{"width":915,"height":480,"url":"https:\/\/anchoramconsulting.com\/au\/wp-content\/uploads\/sites\/2\/2024\/01\/NIST_800-82_quiet_achiever-min.jpg","type":"image\/jpeg"}],"author":"Anchoram Consulting","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Anchoram Consulting","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/anchoramconsulting.com\/au\/blog\/2023\/12\/11\/nist-800-82-the-quiet-achiever\/#article","isPartOf":{"@id":"https:\/\/anchoramconsulting.com\/au\/blog\/2023\/12\/11\/nist-800-82-the-quiet-achiever\/"},"author":{"name":"Anchoram Consulting","@id":"https:\/\/anchoramconsulting.com\/au\/#\/schema\/person\/1a3072848bd1a696ca298dacd5e4a148"},"headline":"NIST 800-82: The Quiet Achiever","datePublished":"2023-12-11T14:17:07+00:00","dateModified":"2024-05-10T03:18:24+00:00","mainEntityOfPage":{"@id":"https:\/\/anchoramconsulting.com\/au\/blog\/2023\/12\/11\/nist-800-82-the-quiet-achiever\/"},"wordCount":426,"commentCount":0,"image":{"@id":"https:\/\/anchoramconsulting.com\/au\/blog\/2023\/12\/11\/nist-800-82-the-quiet-achiever\/#primaryimage"},"thumbnailUrl":"https:\/\/anchoramconsulting.com\/au\/wp-content\/uploads\/sites\/2\/2024\/01\/NIST_800-82_quiet_achiever-min.jpg","articleSection":["Security"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/anchoramconsulting.com\/au\/blog\/2023\/12\/11\/nist-800-82-the-quiet-achiever\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/anchoramconsulting.com\/au\/blog\/2023\/12\/11\/nist-800-82-the-quiet-achiever\/","url":"https:\/\/anchoramconsulting.com\/au\/blog\/2023\/12\/11\/nist-800-82-the-quiet-achiever\/","name":"NIST 800-82: The Quiet Achiever - Anchoram Australia","isPartOf":{"@id":"https:\/\/anchoramconsulting.com\/au\/#website"},"primaryImageOfPage":{"@id":"https:\/\/anchoramconsulting.com\/au\/blog\/2023\/12\/11\/nist-800-82-the-quiet-achiever\/#primaryimage"},"image":{"@id":"https:\/\/anchoramconsulting.com\/au\/blog\/2023\/12\/11\/nist-800-82-the-quiet-achiever\/#primaryimage"},"thumbnailUrl":"https:\/\/anchoramconsulting.com\/au\/wp-content\/uploads\/sites\/2\/2024\/01\/NIST_800-82_quiet_achiever-min.jpg","datePublished":"2023-12-11T14:17:07+00:00","dateModified":"2024-05-10T03:18:24+00:00","author":{"@id":"https:\/\/anchoramconsulting.com\/au\/#\/schema\/person\/1a3072848bd1a696ca298dacd5e4a148"},"description":"Although standards such as IEC 62443 are useful for comprehensive approaches, NIST 800-82 provided an excellent point of reference.","breadcrumb":{"@id":"https:\/\/anchoramconsulting.com\/au\/blog\/2023\/12\/11\/nist-800-82-the-quiet-achiever\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/anchoramconsulting.com\/au\/blog\/2023\/12\/11\/nist-800-82-the-quiet-achiever\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/anchoramconsulting.com\/au\/blog\/2023\/12\/11\/nist-800-82-the-quiet-achiever\/#primaryimage","url":"https:\/\/anchoramconsulting.com\/au\/wp-content\/uploads\/sites\/2\/2024\/01\/NIST_800-82_quiet_achiever-min.jpg","contentUrl":"https:\/\/anchoramconsulting.com\/au\/wp-content\/uploads\/sites\/2\/2024\/01\/NIST_800-82_quiet_achiever-min.jpg","width":915,"height":480,"caption":"Graphic animation of secure servers"},{"@type":"BreadcrumbList","@id":"https:\/\/anchoramconsulting.com\/au\/blog\/2023\/12\/11\/nist-800-82-the-quiet-achiever\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/anchoramconsulting.com\/au\/"},{"@type":"ListItem","position":2,"name":"NIST 800-82: The Quiet Achiever"}]},{"@type":"WebSite","@id":"https:\/\/anchoramconsulting.com\/au\/#website","url":"https:\/\/anchoramconsulting.com\/au\/","name":"Anchoram Australia","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/anchoramconsulting.com\/au\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/anchoramconsulting.com\/au\/#\/schema\/person\/1a3072848bd1a696ca298dacd5e4a148","name":"Anchoram Consulting","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/3d61e9ba8bbdaceb8c2a6173b04c9249290e50a1043eeb788089e1dca62377c3?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/3d61e9ba8bbdaceb8c2a6173b04c9249290e50a1043eeb788089e1dca62377c3?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/3d61e9ba8bbdaceb8c2a6173b04c9249290e50a1043eeb788089e1dca62377c3?s=96&d=mm&r=g","caption":"Anchoram Consulting"},"url":"https:\/\/anchoramconsulting.com\/au\/blog\/profiles\/anchoram-consulting\/"}]}},"_links":{"self":[{"href":"https:\/\/anchoramconsulting.com\/au\/wp-json\/wp\/v2\/posts\/1336","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/anchoramconsulting.com\/au\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/anchoramconsulting.com\/au\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/anchoramconsulting.com\/au\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/anchoramconsulting.com\/au\/wp-json\/wp\/v2\/comments?post=1336"}],"version-history":[{"count":3,"href":"https:\/\/anchoramconsulting.com\/au\/wp-json\/wp\/v2\/posts\/1336\/revisions"}],"predecessor-version":[{"id":1626,"href":"https:\/\/anchoramconsulting.com\/au\/wp-json\/wp\/v2\/posts\/1336\/revisions\/1626"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/anchoramconsulting.com\/au\/wp-json\/wp\/v2\/media\/1616"}],"wp:attachment":[{"href":"https:\/\/anchoramconsulting.com\/au\/wp-json\/wp\/v2\/media?parent=1336"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/anchoramconsulting.com\/au\/wp-json\/wp\/v2\/categories?post=1336"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/anchoramconsulting.com\/au\/wp-json\/wp\/v2\/tags?post=1336"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}