Applying the Risk Management Framework: The Distributed Energy Resource Risk Manager
- National Renewable Energy Laboratory (NREL), Golden, CO (United States)
As part of a multiyear effort, the National Renewable Energy Laboratory (NREL) has dedicated resources to understand and identify cybersecurity weaknesses in distributed energy resources (DERs) by performing assessments. Due to a lack of standardization and rapidly increasing adoption of DERs, there is a critical need to address cybersecurity needs for DER systems in an interactive way. Furthermore, federal agencies, which are required to obtain an authority to operate, are challenged by the complexities of including their DERs. To help meet this need, in early 2020, NREL released the Distributed Energy Resources Cybersecurity Framework (DERCF) and accompanying Web application. This process is supported by the Risk Management Framework (RMF) developed by the National Institute of Standards and Technology. This project, referred to as the DERCF RMF application, expands on the existing DERCF work to include methods that support walking a user through the seven RMF steps. The tool will be available for download at no cost from [link ]. The purpose of this paper is to describe the steps the DERCF team at NREL took to understand Steps 1-5 of the RMF process. Additionally, this document will identify future work on the first five steps as well as a plan for Steps 6 and 7.
- Research Organization:
- National Renewable Energy Laboratory (NREL), Golden, CO (United States)
- Sponsoring Organization:
- USDOE Office of Energy Efficiency and Renewable Energy (EERE), Energy Efficiency Office. Federal Energy Management Program Office
- DOE Contract Number:
- AC36-08GO28308
- OSTI ID:
- 1901926
- Report Number(s):
- NREL/TP-5R00-78436; MainId:32353; UUID:727712ad-198f-4205-bb3d-a2464e62b884; MainAdminID:67634
- Country of Publication:
- United States
- Language:
- English
Similar Records
Distributed Energy Resources Cybersecurity Framework: Applying the NIST Risk Management Process
Distributed Energy Resources Cybersecurity Framework & Risk Manager
Guide to the Distributed Energy Resource Risk Management Framework
Technical Report
·
Thu Oct 01 00:00:00 EDT 2020
·
OSTI ID:1710147
Distributed Energy Resources Cybersecurity Framework & Risk Manager
Conference
·
Wed Oct 20 00:00:00 EDT 2021
·
OSTI ID:1827633
Guide to the Distributed Energy Resource Risk Management Framework
Technical Report
·
Fri Apr 01 00:00:00 EDT 2022
·
OSTI ID:1862004