Guide to Industrial Control Systems (ICS) Security

Published

May 14, 2013

Author(s)

Keith A. Stouffer, Joseph A. Falco, Karen A. Scarfone

Abstract

[Superseded by NIST SP 800-82 Rev. 2 (May 2015): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=918368] This document provides guidance on how to secure Industrial Control Systems (ICS), including Supervisory Control and Data Acquisition (SCADA) systems, Distributed Control Systems (DCS), and other control system configurations such as Programmable Logic Controllers (PLC), while addressing their unique performance, reliability, and safety requirements. The document provides an overview of ICS and typical system topologies, identifies typical threats and vulnerabilities to these systems, and provides recommended security countermeasures to mitigate the associated risks. [Supersedes NIST SP 800-82 (June 2011): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=907249]

Citation

Special Publication (NIST SP) - 800-82 Rev 1

Report Number

800-82 Rev 1

NIST Pub Series

Special Publication (NIST SP)

Pub Type

NIST Pubs

Supercedes Publication

Guide to Industrial Control Systems (ICS) Security - Supervisory Control and Data Acquisition (SCADA) systems, Distributed Control Systems (DCS), and other control system configurations such as Programmable Logic Controllers (PLC)

Superceded By Publication

Guide to Industrial Control Systems (ICS) Security

Download Paper

DOI Link

Keywords

Computer security, distributed control systems (DCS), industrial control systems (ICS), information security, network security, programmable logic controllers (PLC), risk management, security controls, supervisory control and data acquisition (SCADA) systems

Citation

Stouffer, K. , Falco, J. and Scarfone, K. (2013), Guide to Industrial Control Systems (ICS) Security, Special Publication (NIST SP), National Institute of Standards and Technology, Gaithersburg, MD, [online], https://doi.org/10.6028/NIST.SP.800-82r1 (Accessed October 16, 2025)