The Federal Energy Management Program (FEMP) provides information and tools to help agencies enhance the cybersecurity posture of federal facilities and facilitate the implementation of Executive Order (E.O.) 13800: Strengthening the Cybersecurity of Federal Networks and Critical Infrastructure.
Offers an overview of operational technology cybersecurity and explains why it is important for federal facilities, sites and campuses.
Learn more
Implement E.O. 13800's National Institute of Standards and Technology (NIST) Cybersecurity Framework in federal facilities.
Learn more
Identify areas of cyber risk managerial improvement using this tool.
Learn more
Engage this tool for detailed scoring and assessments on the state of a facility’s cybersecurity management.
Learn more
Pinpoint cybersecurity vulnerabilities for renewable energy systems and develop customized action plans to improve security controls and practices.
Learn more
Games will prompt players to make decisions on what should be implemented in a facility in an effort to contain a cybersecurity breach.
Learn more
Features questions agencies should consider for when cybersecurity experts should be consulted in the procurement of equipment.
Learn more
Review and connect requirements in the Risk Management Framework with the NIST Cybersecurity Framework.
Learn more
Address E.O. 13800 to strengthen the cybersecurity posture of federal agencies.
Learn more
Qualitatively assess risk to visualize cybersecurity vulnerabilities and impacts across assets.
Learn more
Provides an overview of the Distributed Energy Resources (DER) Cybersecurity Framework and serves as a guide to apply this framework to the DER.
Learn more
Videos
FCF Training Game
The FCF helps facility owners and operators manage their cybersecurity risks in the operational technology systems.
Video courtesy of the U.S. Department of Energy
Facility Cyber Tool Suite
The Facility Cyber Tool Suite helps federal facilities enhance the cybersecurity of operational technology specifically tailored to address key facility-related control systems.
Video courtesy of the U.S. Department of Energy
Securing Distributed Energy Systems with NREL's DERCF
The DERCF provides federal agency sites with a tool to assess the cybersecurity posture—or health—of their distributed energy resource systems.
Video courtesy of the U.S. Department of Energy
Mitigation of Externally Exposed Energy Delivery Systems (MEEDS) Tool
The MEEDS tool helps facility owners and operators to detect whether their systems are inadvertently exposed to the public internet and discover any vulnerabilities.
Video courtesy of the U.S. Department of Energy
Key Resources
Fact sheet describes federal facility cybersecurity strategies gleaned from experiences at several U.S. Department of Energy national laboratories.
This document provides a short overview of cybersecurity procurement and implementation guidelines for federal facilities.
To assist with embedding cybersecurity in the procurement of energy delivery systems, this Cybersecurity Procurement Language for Energy Delivery Systems guidance document provides baseline cybersecurity procurement language for use by asset owners, op...
To assist with embedding cybersecurity in the procurement of energy delivery systems, this Cybersecurity Procurement Language for Energy Delivery Systems guidance document provides baseline cybersecurity procurement language for use by asset owners, op...
Describes agency initiative to educate managers about operational technology cybersecurity concepts.
Recommended FEMP Courses
Need Assistance?
Need energy management guidance? Can't find a document or tool? FEMP can help. Ask FEMP a question.