Energy
Cyber threats to the nation’s energy infrastructure are growing and evolving. Today, we connect cyber-physical systems that run the power grid, oil and natural gas pipelines, and other energy systems to business networks, billing systems, and monitoring systems. While this offers efficiencies in grid operations and real-time system awareness, it could make our energy infrastructure vulnerable to cyberattacks.
Since 2013, the NCCoE has been providing guidance and example solutions to help utilities and operators of critical energy infrastructure protect the complex IT and operational technology (OT) systems that power our economy.
Security Guidance
-
Cybersecurity for Smart Inverters: Guidelines for Residential and Light Commercial Solar Energy Systems
Practical cybersecurity guidelines for small-scale solar inverter implementations typically used in homes and small businesses.Reviewing Comments -
Cybersecurity Framework Profile for Electric Vehicle Extreme Fast Charging Infrastructure
Providing users with a national-level risk-based approach for managing cybersecurity activities for EV XFC systems.Finalized Guidance -
Cybersecurity Framework Profile for Liquefied Natural Gas
A unified approach to identify and prioritize opportunities for managing cybersecurity risks in the liquefied natural gas lifecycle.Finalized Guidance -
Securing Distributed Energy Resources
An approach for securing data exchanges between and among distributed energy resource systems and electric power distribution facilitiesFinalized Guidance -
Identity and Access Management (IdAM) for the Energy Sector
A single, centralized IdAM solution to control and secure access to utility resources, including OT and IT systems, buildings, and equipmentFinalized Guidance -
Asset Management for the Energy Sector
Methods for managing, monitoring, and baselining IT and OT assets to reduce the risk of cybersecurity incidentsFinalized Guidance -
Situational Awareness for the Energy Sector
Mechanisms to capture, transmit, analyze, and store real-time and near-real-time data from both IT and OT networks and systemsFinalized Guidance
Join the Community of Interest
A Community of Interest (COI) is a group of professionals and advisors who share business insights, technical expertise, challenges, and perspectives to guide NCCoE projects. COIs often include experts, innovators, and everyday users of cybersecurity and privacy technologies. Share your expertise and consider becoming a member of this project's COI.
-
Announcements
NCCoE Publishes Final NIST IR 8406, Cybersecurity Framework Profile for Liquefied Natural Gas
-
Announcements
Cybersecurity Capability Maturity Model to NIST Cybersecurity Framework Mapping
-
Announcements
Open for Public Comment, Draft NIST IR 8406, Cybersecurity Framework Profile for Liquefied Natural Gas
A Look Inside the NCCoE's Energy Lab
Step inside the NIST National Cybersecurity Center of Excellence’s (NCCoE’s) Energy Sector Cybersecurity Lab and learn what we’re working on to help protect the cyber-physical systems that run the power grid, oil and natural gas pipelines, and other energy systems.
NCCoE: A Look Inside the Energy Sector Cybersecurity Lab
