Source summary According to NIST's September 21, 2026 announcement, the initial public draft of SP 800-82r4 covers industrial equipment as well as building automation, water and wastewater, transport, and connections to industrial IoT and cloud systems. Aligned with CSF 2.0, it emphasizes governance and enterprise risk management and expands guidance on asset management, network monitoring and protection of management functions. Comments are due November 30, 2026. The document is not yet final guidance. TABS Company's business perspective Manufacturers and facility operators can begin by documenting equipment, external connections, remote-maintenance permissions and incident decision-makers. Assess the effect of security changes on safety and operational continuity, and test before implementation. Use the draft to inform improvement plans; do not interpret it as a Korean legal requirement or a finalized certification standard.