TY  - JOUR
AU  - Stanchev, Plamen
AU  - Hinov, Nikolay
AU  - Salimov, Atakan
AU  - Ziulqmova, Bulbul
AU  - Redjeb, Adnan
PY  - 2026
DA  - 2026/04/08
TI  - A Structured Framework for Cybersecurity Assessment of Microgrids and Nanogrids
JO  - ICCK Transactions on Electric Power Networks and Systems
T2  - ICCK Transactions on Electric Power Networks and Systems
JF  - ICCK Transactions on Electric Power Networks and Systems
VL  - 2
IS  - 2
SP  - 58
EP  - 71
DO  - 10.62762/TEPNS.2026.258528
UR  - https://www.icck.org/article/abs/TEPNS.2026.258528
KW  - cybersecurity
KW  - microgrids
KW  - nanogrids
KW  - IT/OT security
KW  - threat modeling
KW  - maturity assessment
KW  - smart inverters
KW  - resilience
AB  - Microgrids and nanogrids are increasingly deployed to support decentralized generation, local resilience, and renewable integration. However, their growing reliance on digital control, communication networks, cloud services, and IT–OT integration exposes them to diverse cybersecurity threats. Unlike traditional utility-scale systems, microgrids and nanogrids often operate under resource constraints, heterogeneous architectures, and limited cybersecurity expertise, making direct application of large-scale security frameworks impractical. This paper proposes a structured cybersecurity assessment framework for small- and medium-scale energy systems, supporting systematic risk identification, evaluation, and prioritization. The framework combines architectural inventory, trust-boundary analysis, threat modeling, and maturity-based assessment across six domains: governance and risk management, identity and access management, network and communication security, control-system and device security, monitoring and incident response, and physical security. Emphasis is placed on proportionality, repeatability, and actionability, enabling application across diverse operational contexts without excessive burden. An illustrative application to a campus microgrid and building nanogrid demonstrates how the framework assesses cybersecurity posture, identifies critical vulnerabilities, and defines staged mitigation roadmaps. Results indicate that a structured, context-aware assessment approach significantly improves cybersecurity awareness, investment prioritization, and resilience-oriented decision-making in decentralized energy environments. The framework offers a practical foundation for operators, designers, and policymakers seeking to enhance micro- and nanogrid security and resilience.
SN  - 3070-2607
PB  - Institute of Central Computation and Knowledge
LA  - English
ER  - 

@article{Stanchev2026A,
  author = {Plamen Stanchev and Nikolay Hinov and Atakan Salimov and Bulbul Ziulqmova and Adnan Redjeb},
  title = {A Structured Framework for Cybersecurity Assessment of Microgrids and Nanogrids},
  journal = {ICCK Transactions on Electric Power Networks and Systems},
  year = {2026},
  volume = {2},
  number = {2},
  pages = {58-71},
  doi = {10.62762/TEPNS.2026.258528},
  url = {https://www.icck.org/article/abs/TEPNS.2026.258528},
  abstract = {Microgrids and nanogrids are increasingly deployed to support decentralized generation, local resilience, and renewable integration. However, their growing reliance on digital control, communication networks, cloud services, and IT–OT integration exposes them to diverse cybersecurity threats. Unlike traditional utility-scale systems, microgrids and nanogrids often operate under resource constraints, heterogeneous architectures, and limited cybersecurity expertise, making direct application of large-scale security frameworks impractical. This paper proposes a structured cybersecurity assessment framework for small- and medium-scale energy systems, supporting systematic risk identification, evaluation, and prioritization. The framework combines architectural inventory, trust-boundary analysis, threat modeling, and maturity-based assessment across six domains: governance and risk management, identity and access management, network and communication security, control-system and device security, monitoring and incident response, and physical security. Emphasis is placed on proportionality, repeatability, and actionability, enabling application across diverse operational contexts without excessive burden. An illustrative application to a campus microgrid and building nanogrid demonstrates how the framework assesses cybersecurity posture, identifies critical vulnerabilities, and defines staged mitigation roadmaps. Results indicate that a structured, context-aware assessment approach significantly improves cybersecurity awareness, investment prioritization, and resilience-oriented decision-making in decentralized energy environments. The framework offers a practical foundation for operators, designers, and policymakers seeking to enhance micro- and nanogrid security and resilience.},
  keywords = {cybersecurity, microgrids, nanogrids, IT/OT security, threat modeling, maturity assessment, smart inverters, resilience},
  issn = {3070-2607},
  publisher = {Institute of Central Computation and Knowledge}
}