K06 assurance and procurement architecture
NIST operational-technology security Official-Source Review
Direct answer
SP 800-82 Revision 3 remains the final OT security publication at the K07 cutoff.
Authority and evidence boundary. K06 publishes reference architecture, source review, machine-checkable dependencies, procurement scope, and test-evidence formats. These records do not certify a facility, award a contract, authorize an operation, prove deployment, establish current operation, or transfer regulatory or command authority.
Supported bounded propositions
- SP 800-82 Revision 3 remains the final OT security publication at the K07 cutoff.
- NIST initiated a Revision 4 pre-draft process in January 2026.
Unavailable or unresolved
- The Revision 4 pre-draft notice is not a final control baseline.
- NIST guidance does not decide NRC, NERC, contract, or facility applicability by itself.
Official source records
NIST SP 800-82 Revision 3 — K07 Official Review Record · NIST SP 800-82 Revision 4 — Pre-Draft Call for Comments
Currentness qualification
Point-in-time review performed on 2026-08-15 against the cited official or first-party publication location. There is no public runtime monitor and no live-host observation. A reviewed publication does not decide facility applicability, legal interpretation, compliance, licensing, operational authority, or later currentness.