Operational Technology

A Federal News Network commentary warns that Iran-linked cyber activity increasingly targets U.S. critical infrastructure, the defense industrial base, subcontractors, and operational technology. It says NIST SP 800-171 controls can mitigate 68% of 130 mapped techniques, while appropriate monitoring can detect all 130—pointing contractors toward supply-chain, OT, and monitoring reviews rather than a new procurement mandate.

APTA’s Transit Cybersecurity Working Group has identified potential 2027 work on operational technology procurement requirements, OT assessment guidance, and transit-specific AI governance and System Assurance. The proposals are for further review—not adopted requirements or an open solicitation—but offer agencies and contractors planning cues for future cybersecurity and reliability needs.

Dispel and Tenable have integrated Tenable One OT Exposure intelligence with Dispel’s Zero Trust Engine to inform industrial remote-access decisions in real time. Available to joint customers across cloud, on-premises, and hybrid environments, the commercial offering is not a government award or solicitation but may inform OT cybersecurity requirements and market research.

The U.S. Army Information Systems Engineering Command (USAISEC) describes Risk Management Framework as a Service (RMFaaS), supporting cybersecurity engineering, compliance, continuous monitoring, and ongoing authorization. The announcement outlines an existing service model—not a solicitation or award—so contractors should treat it as capability context rather than an active procurement.

The NSA has issued new guidance on applying zero trust principles to operational technology (OT) systems. This document advises defense and critical infrastructure sectors on enhancing security but does not impose compliance requirements or set deadlines for implementation.

The National Institute of Standards and Technology (NIST) has published a draft extending cybersecurity guidance for operational technology (OT). Stakeholders can comment on the draft until November 30, 2026, as it aims to improve security across critical sectors like water and agriculture amidst rising cyber threats.

In August 2026, Rockwell Automation and H.S. Automation conducted a cybersecurity risk assessment for Indinvest LT, an aluminum manufacturer in Italy. This initiative aligns with recognized standards such as IEC 62443 and NIST, enhancing the company's operational resilience as industrial connectivity grows.

Corsha has been awarded a **$50 million** contract by the **U.S. Defense Logistics Agency (DLA)** to implement zero-trust connectivity solutions, aimed at enhancing cybersecurity within the DoD's logistics operations. This investment highlights the increasing need for advanced cybersecurity measures in operational technology environments, particularly for defense and critical infrastructure sectors.

The FBI probes a series of cyberattacks on Midwest water systems linked to Iranian threats. Local governments may boost investments in cybersecurity infrastructure, creating procurement opportunities in operational technology safety.

U.S. critical infrastructure sectors are increasingly vulnerable to cyber-physical threats, necessitating procurement of advanced cybersecurity solutions. Contractors specializing in operational technology modernization are uniquely positioned to assist agencies in mitigating these risks.

NIST has released Special Publication 1339, providing crucial backup guidance for Operational Technology (OT) environments. This document emphasizes the need for effective backup strategies and is likely to impact procurement requirements for cybersecurity solutions in both government and industrial sectors.

The National Institute of Standards and Technology has unveiled a draft guide aimed at enhancing ransomware response and recovery in industrial control systems. This initiative, developed alongside leading technology firms, signals an increased focus on cyber resilience and will impact procurement strategies in the manufacturing sector.

As industrial operators pivot towards a zero trust security model for operational technology (OT), the focus is shifting from purely identity verification to enhancing asset visibility and operational resilience. This transition paves the way for new procurement opportunities for companies offering integrated cybersecurity solutions tailored to OT environments.

The NIST's National Cybersecurity Center of Excellence has launched a critical cybersecurity initiative focusing on operational technology (OT). This project aims to address visibility challenges in OT environments, creating significant procurement implications for vendors offering cybersecurity solutions tailored for critical infrastructure.