scope:

This guideline document addresses cybersecurity protection of electrical infrastructure when network connected within the context of a commercial, industrial, or residential building. It does not address cloud-based or other systems outside the scope of the building infrastructure. It describes methods to protect the various systems and products within the infrastructure through best practices, industry standards, or the utilization of compensating controls. An assessment of the network connected system and its components is discussed along with the various solutions to providing cybersecurity across multiple security levels. Emphasis will be placed on network connected electrical infrastructure that has safety implications.