Dispel recently announced the general availability of Dispel Compliance — a new Governance, Risk, and Compliance (GRC) capability within the Dispel Zero Trust Engine that delivers continuous, automated audit readiness for Operational Technology (OT) and ICS organizations.
For utilities, manufacturers, and energy operators, maintaining compliance under frameworks like NERC CIP, NIST SP 800-53, IEC 62443, and EU NIS2 requires dedicated teams, manual evidence collection, and repeated screenshot-gathering every audit cycle. Compliance friction also stalls adoption. When an OT team wants to deploy a new zero trust remote access platform, their GRC organization requires proof the tool meets audit requirements before it goes into the factory.
That evaluation has historically taken months. Dispel Compliance looks to streamline the process with features that include:
- An Inherited Controls Engine for OT remote access that is built on OSCAL 1.1.2 — the NIST Open Security Controls Assessment Language specification used by FedRAMP and federal audit platforms. The platform continuously evaluates its own implementation of each in-scope control against the customer’s live tenant configuration. The result is a timestamped inheritance claim that is ready for any audit — not assembled manually in the weeks before one.
- Pre-deployment GRC approval: GRC teams receive an immediate, exportable assessment of the Dispel platform’s configuration against applicable frameworks, replacing manual evaluation with a same-day answer.
- Ongoing compliance maintenance: Real-time framework scoring surfaces misconfigured controls the moment they drift from baseline. A configuration impact simulator lets administrators preview how any setting change shifts inherited control coverage before making it.
- Audit evidence delivery: Timestamped evidence packages export as an OSCAL Component Definition — the standard artifact accepted by leading GRC platforms — alongside CSV and PDF executive summary formats for auditors still on spreadsheet-based workflows.
- One evidence pipeline covers every active framework simultaneously. Organizations reporting under both NERC CIP and NIST SP 800-53 — or NIS2 and NIST CSF — draw from the same underlying evidence without maintaining separate workflows.
- Supported frameworks at launch: NERC CIP, NIST SP 800-53 Rev 5, NIST CSF 2.0, EU NIS2, IEC 62443, and SANS ICS Critical Controls.
More information is available at dispel.com/book.
