Skip to main content

Distributed Energy Resource Cybersecurity Framework

The Distributed Energy Resource Cybersecurity Framework (DER-CF) is a no-cost, interactive web tool that holistically evaluates a facility’s distributed energy resource (DER) cybersecurity posture—or health—and makes customized recommendations.


or use the anonymous version

Dercf Logo

Securing Distributed Energy Systems

Securing Distributed Energy Systems with NREL’s DER‑CF

Compared to centralized generation, DERs result in complex, data-driven communications. With DER-CF, facilities can protect their renewable energy assets and help ensure a more secure grid.

Text version

Request Technical Assistance

Get one-on-one help identifying your organization’s risks, preparing for incidents, and more by filling out our technical assistance form.


With DER-CF, users can conduct multiple assessments across their organization to benchmark and evaluate cybersecurity posture. After completing the assessment, users can download a customized report outlining their facility’s risks and an improvement plan. Check out an example report.

Governance Maturity

Technical Management Maturity

Physical Security Maturity


Related Tools and Projects

Distributed Energy Resource Risk Manager

An automated, user-friendly tool that helps federal sites navigate and implement the National Institute of Standards and Technology Risk Management Framework.

Alpha Download

Distributed Energy Resource Visual Emulator

The DER-CF is being integrated with NREL’s cyber range, an advanced cyber-physical emulation environment that facilitates the real-time validation of cybersecurity strategies on replica energy system networks.