The Federal Energy Management Program (FEMP) provides information and tools to help agencies enhance the cybersecurity posture of federal facilities and facilitate the implementation of Executive Order (E.O.) 13800: Strengthening the Cybersecurity of Federal Networks and Critical Infrastructure.

Operational Technology Cybersecurity for Energy Systems
Offers an overview of operational technology cybersecurity and explains why it is important for federal facilities, sites and campuses.
Learn more
NIST Cybersecurity Framework
Implement E.O. 13800's National Institute of Standards and Technology (NIST) Cybersecurity Framework in federal facilities.
Learn more
Facility Cybersecurity F-C2M2 Lite Assessment
Identify areas of cyber risk managerial improvement using this tool.
Learn more
FCF Core Assessment 1.1
Engage this tool for detailed scoring and assessments on the state of a facility’s cybersecurity management.
Learn more
Distributed Energy Resource Cybersecurity Framework
Pinpoint cybersecurity vulnerabilities for renewable energy systems and develop customized action plans to improve security controls and practices.
Learn more
Cybersecurity Training Games
Games will prompt players to make decisions on what should be implemented in a facility in an effort to contain a cybersecurity breach.
Learn more
Cybersecurity Considerations for Procurement
Features questions agencies should consider for when cybersecurity experts should be consulted in the procurement of equipment.
Learn more
Risk Management Framework Process Map
Review and connect requirements in the Risk Management Framework with the NIST Cybersecurity Framework.
Learn more
Facility Cybersecurity Framework (FCF)
Address E.O. 13800 to strengthen the cybersecurity posture of federal agencies.
Learn more
Facility Cybersecurity Qualitative Risk Assessment
Qualitatively assess risk to visualize cybersecurity vulnerabilities and impacts across assets.
Learn more
Guide to the Distributed Energy Resources Cybersecurity Framework
Provides an overview of the Distributed Energy Resources (DER) Cybersecurity Framework and serves as a guide to apply this framework to the DER.
Learn more

Videos

FCF Training Game

Video Url

The FCF helps facility owners and operators manage their cybersecurity risks in the operational technology systems.

Video courtesy of the U.S. Department of Energy

Facility Cyber Tool Suite

Video Url
The Facility Cyber Tool Suite helps federal facilities enhance the cybersecurity of operational technology specifically tailored to address key facility-related control systems.
Video courtesy of the U.S. Department of Energy

Securing Distributed Energy Systems with NREL's DERCF

Video Url

The DERCF provides federal agency sites with a tool to assess the cybersecurity posture—or health—of their distributed energy resource systems.

Video courtesy of the U.S. Department of Energy

Mitigation of Externally Exposed Energy Delivery Systems (MEEDS) Tool

Video Url
The MEEDS tool helps facility owners and operators to detect whether their systems are inadvertently exposed to the public internet and discover any vulnerabilities.
Video courtesy of the U.S. Department of Energy

Key Resources

Recommended FEMP Courses

Need Assistance?

Need energy management guidance? Can't find a document or tool? FEMP can help. Ask FEMP a question.