U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

SP 1800-32 (Draft)

Securing the Industrial Internet of Things: Cybersecurity for Distributed Energy Resources (Preliminary Draft)

Date Published: April 2021
Comments Due: May 24, 2021 (public comment period is CLOSED)
Email Questions to: energy_nccoe@nist.gov

Author(s)

James McCarthy (Malaviya National Institute of Technology), Eileen Division (MITRE), Don Faatz (MITRE), Nikolas Urlaub (MITRE), John Wiltberger (MITRE)

Announcement

NIST’s National Cybersecurity Center of Excellence (NCCoE) has posted for comment a Preliminary Draft of SP 1800-32 (Volumes A and B) on Securing the Industrial Internet of Things: Cybersecurity for Distributed Energy Resources.

The use of small-scale distributed energy resources (DERs), such as wind and solar photovoltaics, are growing rapidly and transforming the power grid. In fact, a distribution utility may need to remotely communicate with thousands of DERs and other grid-edge devices—many of which are not owned by them.  Any attack that can deny, disrupt, or tamper with DER communications could prevent a utility from performing necessary control actions and could diminish grid resiliency.

In this practice guide, the NCCoE applies standards, best practices, and commercially available technology to protect the digital communication, data, and control of cyber-physical grid-edge devices. The guide demonstrates an example solution for monitoring and detecting unusual behavior of connected industrial internet of things devices and building a comprehensive audit trail of trusted IIoT data flows. 

By releasing Volumes A and B as a preliminary draft, we are sharing our progress made to date, using the feedback received to shape future drafts of the practice guide, and featuring technologies and practices that organizations can use to monitor, trust, and protect information exchanges between commercial- and utility-scale distributed energy resources (DERs). 

Abstract

Keywords

data integrity; distributed energy resource; industrial internet of things; malware; microgrid; smart grid
Control Families

None selected

Documentation

Publication:
Prelim. Draft and Project homepage
Submit Comments

Supplemental Material:
Submit Comments (web)

Document History:
04/22/21: SP 1800-32 (Draft)