Guide to Industrial Control Systems (ICS) Security

Stouffer, Keith; Lightman, Suzanne; Pillitteri, Victoria; Abrams, Marshall; Hahn, Adam

doi:https://doi.org/10.6028/NIST.SP.800-82r2

SP 800-82 Rev. 2

Guide to Industrial Control Systems (ICS) Security

Documentation Topics

Date Published: May 2015

Supersedes: SP 800-82 Rev. 1 (05/14/2013)

Author(s)

Keith Stouffer (NIST), Suzanne Lightman (NIST), Victoria Pillitteri (NIST), Marshall Abrams (MITRE), Adam Hahn (WSU)

Abstract

This document provides guidance on how to secure Industrial Control Systems (ICS), including Supervisory Control and Data Acquisition (SCADA) systems, Distributed Control Systems (DCS), and other control system configurations such as Programmable Logic Controllers (PLC), while addressing their unique performance, reliability, and safety requirements. The document provides an overview of ICS and typical system topologies, identifies typical threats and vulnerabilities to these systems, and provides recommended security countermeasures to mitigate the associated risks.

Keywords

information security; network security; programmable logic controllers (PLC); risk management; security controls; distributed control systems (DCS); supervisory control and data acquisition (SCADA) systems; industrial control systems (ICS); Computer security

Control Families

None selected

Documentation

Publication:
SP 800-82 Rev. 2 (DOI)
Local Download

Supplemental Material:
Press Release (other)

Related NIST Publications:
SP 800-82 Rev. 3 (Draft)
SP 800-82 Rev. 3 (Draft)
White Paper

Document History:
06/03/15: SP 800-82 Rev. 2 (Final)

Topics

Security and Privacy
risk assessment; threats; vulnerability management

Technologies
networks; sensors

Applications
cyber-physical systems; industrial control systems

Laws and Regulations
Homeland Security Presidential Directive 7