NOTICE: Due to a lapse in annual appropriations, most of this website is not being updated. Learn more.
Form submissions will still be accepted but will not receive responses at this time. Sections of this site for programs using non-appropriated funds (such as NVLAP) or those that are excepted from the shutdown (such as CHIPS and NVD) will continue to be updated.
An official website of the United States government
Here’s how you know
Official websites use .gov
A .gov website belongs to an official government organization in the United States.
Secure .gov websites use HTTPS
A lock (
) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.
Energy Sector Asset Management: For Electric Utilities, Oil & Gas Industry
Published
Author(s)
James J. McCarthy, Lauren Acierto, Jason Kuruvilla, Titilayo Ogunyale, Nikolas Urlaub, John Wiltberger, Devin Wynne
Abstract
Industrial control systems (ICS) compose a core part of our nations critical infrastructure. Energy sector companies rely on ICS to generate, transmit, and distribute power and to drill, produce, refine, and transport oil and natural gas. Given the wide variety of ICS assets, such as programmable logic controllers and intelligent electronic devices, that provide command and control information on operational technology (OT) networks, it is essential to protect these devices to maintain continuity of operations. These assets must be monitored and managed to reduce the risk of a cyber attack on ICS-networked environments. Having an accurate OT asset inventory is a critical component of an overall cybersecurity strategy. NIST SP 1800-23B: Energy Sector Asset Management iii The NCCoE at NIST is responding to the energy sectors request for an automated OT asset management solution. To remain fully operational, energy sector entities should be able to effectively identify, control, and monitor their OT assets. This document provides guidance on how to enhance OT asset management practices by leveraging capabilities that may already exist in an energy organizations operating environment as well as implementing new capabilities.
energy sector asset management, ESAM, ICS, industrial control system, malicious actor, monitoring, operational technology, OT, SCADA, supervisory control and data acquisition
McCarthy, J.
, Acierto, L.
, Kuruvilla, J.
, Ogunyale, T.
, Urlaub, N.
, Wiltberger, J.
and Wynne, D.
(2020),
Energy Sector Asset Management: For Electric Utilities, Oil & Gas Industry, Special Publication (NIST SP), National Institute of Standards and Technology, Gaithersburg, MD, [online], https://doi.org/10.6028/NIST.SP.1800-23
(Accessed October 14, 2025)