Complass
NIST CSF 2.0 and OT security: a profile that customers and insurers understand
The US customer asks for the "CSF profile", the insurer for the tier, the plant manager for the plant. How a company builds one answer from it.
The NIST Cybersecurity Framework 2.0 describes cybersecurity outcomes in six functions, 22 categories and 106 subcategories. It is voluntary and not certifiable; a profile connects current state, target profile and action plan. NIST SP 800-82 Rev. 3 complements it for operational technology.
The whitepaper explains structure, profiles and tiers, OT security under SP 800-82 and the link to IEC 62443 and NIS2, with a 10-step plan and a practice example.
8 pages · Version 0.9 · as of 18.10.2026 · Author Marc Linden, Complass GmbH i. G.
Try Complass with your own data
Set up your trial yourself, with a sample project per framework if you like. If you would rather see Complass first, request a demo.