Engineering Papers⌕ Search
Home/Archive/DOE OSTI

DOE OSTI · 1843832

The Cybersecurity Value-at-Risk Framework: Informing Cybersecurity Decisions

Sanghvi, Anuj·Touhiduzzaman, MD·Wand, Paul
View original source ↗Read source document ↗Export metadata ↓

Abstract

A framework that allows users to perform risk management and achieve indicative values for cybersecurity investment decision.

Explore related subjects

cybersecurity valuationHYDRO ENERGY,MATHEMATICS AND COMPUTING,POWER TRANSMISSION AND DISTRIBUTIONhydropower plantrisk management

Keep this discovery

Explore connections, maps & timelines

BibTeXRIS

Sanghvi, Anuj, Touhiduzzaman, MD, Wand, Paul. 2022-01-28. The Cybersecurity Value-at-Risk Framework: Informing Cybersecurity Decisions. https://www.osti.gov/biblio/1843832

Cite the original work for its findings. Save a collection to share your selection of sources.

KEEP EXPLORING

Related reports

DOE OSTI2023

Cybersecurity Value-at-Risk Framework: Preprint

As more variable renewable energy sources are added to the grid, the critical role of hydropower as a reliable baseline and firming resource is rapidly growing. However, the U.S hydropower fleet is not fully prepared to face modern issues such as cybersecurity threats. Hydropower accounts for 37% of U.S. utility-scale renewable electricity but is challenged by diverse infrastructure and legacy devices that predate modern security practices. While new cybersecurity solutions cannot simply be added to current hydropower generation and operation technologies, custom cybersecurity assessments can reveal system-specific threats and risk probabilities and identify mitigating enhancements.

cybersecurity valuation↗
DOE OSTI2023

DER Cybersecurity R&D

The National Renewable Energy Laboratory (NREL) conducted more than 30 assessments for utilities across the United States with a cybersecurity assessment tool based on the U.S. Department of Energy (DOE) Cybersecurity Capability Maturity Model (C2M2) and the National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF) and focused on business process. With funding from the DOE Office of Renewable Energy and Energy Efficiency Federal Energy Management Program, NREL modified the current cyber governance assessment tool to include an assessment process specifically for distributed energy resources (DERs). The Distributed Energy Resources Cybersecurity Framework (DER-CF) was developed to help federal agencies mitigate gaps in their cybersecurity posture for distributed energy systems.

cybersecurity valuation↗