NCCoE Publishes Final Guide on Energy Sector Asset Management

We are pleased to announce that the final version of the National Institute of Standards and Technology (NIST) Special Publication (SP) 1800-23: Energy Sector Asset Management is now available.

A Practical Approach to Operational Technology (OT) Asset Management

Energy sector companies rely on industrial control system (ICS) assets within OT environments to generate, transmit, and distribute power and to drill, produce, refine, and transport oil and natural gas. Given the growing complexity and critical role of these ICS assets, energy companies must be able to effectively identify, control, and monitor all of their OT assets to strengthen cybersecurity. We show how OT asset management practices can be enhanced by leveraging tools that may already exist in their environment or by implementing new capabilities.

This practice guide aims to help energy sector companies implement an asset management solution to monitor and manage OT assets at all times. Standards and best practices were used to deploy strong asset management solutions using commercially available technology. The guide also maps asset management capabilities to the NIST Cybersecurity Framework.

The Third in a Series of Cybersecurity Guides for the Energy Sector

This publication caps off a body of work at the NCCoE that presents energy sector companies with a solid foundation for cybersecurity:

• Identity and Access Management: Control who is on your IT and OT networks and in your facilities
• Energy Sector Asset Management: Know what is on your IT and OT networks
• Situational Awareness for Electric Utilities: Understand what the people and things on your networks are doing