Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

NIST IR 8406 (Initial Public Draft)

Cybersecurity Framework Profile for Liquefied Natural Gas

Date Published: October 17, 2022
Comments Due: November 17, 2022 (public comment period is CLOSED)
Email Questions to:


William Newhouse (NIST), Josephine Long (MITRE), David Weitzel (MITRE), Jason Warren (MITRE), Michael Thompson (MITRE), Chris Yates (MITRE), Hillary Tran (MITRE), Alicia Mink (MITRE), Aurora Herriott (MITRE), Tom Cottle (MITRE)


The LNG Cybersecurity Framework Profile, created in collaboration with the Department of Energy's Office of Cybersecurity, Energy Security, and Emergency Response, in addition to working with LNG security experts, provides a voluntary, risk-based approach for managing cybersecurity activities and reducing cyber risk to all components of the LNG supply chain. The publication explores the industry’s unique alignment of its organizational requirements and objectives, risk appetite, and resources against the desired outcomes of the Cybersecurity Framework Core.

The LNG Cybersecurity Framework Profile identifies and prioritizes opportunities for improving the cybersecurity posture of the LNG supply chain and is designed to supplement, not replace, current cybersecurity standards, regulations, and industry guidelines that are already being used by the LNG industry.

NOTE: A call for patent claims is included on page ii of this draft. For additional information, see the Information Technology Laboratory (ITL) Patent Policy – Inclusion of Patents in ITL Publications.



Cybersecurity Framework; CSF; CSF Profile; liquefaction; liquefied natural gas; LNG; Marine Transportation System; MTS; mission objectives; risk management; security controls
Control Families

None selected


Download URL

Supplemental Material:
Project homepage

Document History:
10/17/22: IR 8406 (Draft)
06/08/23: IR 8406 (Final)


Security and Privacy

security controls


cybersecurity framework


energy, transportation