# NIST Seeks Comments on OT Security Guide

NIST SP 800-82 Revision 3, the current final federal guidance for operational technology (OT) security, recommends risk-based practices and tailored controls for systems such as industrial control, building automation, transportation, and physical access systems. NIST has opened the initial public draft of Revision 4 for comment through November 30, 2026; the guidance itself does not create a standalone mandate, so contractors’ obligations depend on applicable contract or regulatory terms.

- The Revision 4 draft comment period closes **November 30, 2026** (32 days from October 29, 2026). Organizations wishing to provide input should submit comments within that period.
- Contractors supporting OT environments can use Revision 3 as federal guidance when evaluating security approaches, while checking the specific contract and regulatory terms that apply to their work.
- Procurement teams can distinguish the guide’s risk-based recommendations from binding requirements when drafting or assessing OT security language in solicitations and contracts.

**Jurisdictions:** federal
**Industries:** Information Technology
**Topics:** Cybersecurity
**Published:** October 29, 2026

### Government Entities
- National Institute of Standards and Technology (NIST)

### Sources
- [NIST 800-82: OT Security Guide (Rev. 3) Explained — CASRAI](https://casrai.org/guides/nist-800-82) - CASRAI