Which publication from NIST provides guidance on Industrial Control Systems?

The National Institute of Standards and Technology (NIST) Special Publication 800-82 is the definitive official guidance document titled "Guide to Industrial Control Systems (ICS) Security." NIST SP 800-82 provides detailed recommendations on securing Industrial Control Systems, including Supervisory Control and Data Acquisition (SCADA) systems, Distributed Control Systems (DCS), and Programmable Logic Controllers (PLCs). It addresses unique ICS security requirements, threat landscapes, vulnerabilities, and countermeasure implementations while accounting for operational constraints such as high-availability needs, real-time response requirements, and legacy device integration. The document outlines tailored risk management frameworks and defense-in-depth architectures specifically engineered to protect critical infrastructure operational technology environments from cyber threats.

A. NIST SP 800-90: Incorrect because NIST SP 800-90 provides recommendations for random number generation using deterministic random bit generators.
C. NIST SP 800-77: Incorrect because NIST SP 800-77 provides guidance on planning and implementing Internet Protocol Security (IPsec) Virtual Private Networks.
D. NIST SP 800-44: Incorrect because NIST SP 800-44 provides guidelines on securing public-facing web servers.

Stouffer, K., Pillitteri, V., Lightman, S., Abrams, M., & Hahn, A. (2015). Guide to Industrial Control Systems (ICS) Security. NIST Special Publication 800-82, Revision 2. https://doi.org/10.6028/NIST.SP.800-82r2

Barker, E., & Kelsey, J. (2015). Recommendation for Random Number Generation Using Deterministic Random Bit Generators. NIST Special Publication 800-90A Revision 1. https://doi.org/10.6028/NIST.SP.800-90Ar1

Frankel, S., Kent, S., Lewkowski, R., Osgood, G., Sirer, E., & Seger, M. (2005). Guide to IPsec VPNs. NIST Special Publication 800-77. https://doi.org/10.6028/NIST.SP.800-77