Results for “Supply chain security” — Page 7

DOE OSTI2025

Grid Communications Supply Chain & Emerging Regulation Challenges Session 1

The TADA Grid Communications Workshops are designed to strengthen cybersecurity and digital assurance across the energy sector by focusing on secure deployment and management of grid communications technologies. These workshops bring together state energy offices, utilities, and technology suppliers to explore the intersection of communications infrastructure, supply chain risks, and emerging regulatory requirements. Participants will apply Cyber-Informed Engineering (CIE) principles to reduce risks in communications systems, engage with INL’s procurement guidance, and explore future tools. Through scenario-based exercises and peer exchange, attendees will develop risk-based security strategies and actionable compliance roadmaps tailored to their grid communications projects. The workshops also help participants navigate evolving regulatory frameworks such as FEOC rules in the OBBB, NERC CIP-013, and NDAA 2024, while identifying compliance gaps in mixed-technology environments. A key outcome is the formation of a practitioner network with ongoing access to INL expertise and resources, fostering long-term resilience in the digital energy ecosystem.

29 - ENERGY PLANNING, POLICY AND ECONOMY↗

DOE OSTI2025

Grid Communications: Digital Assurance and Supply Chain Challenges and Emerging Regulation Session Two

The TADA Grid Communications Workshops are designed to strengthen cybersecurity and digital assurance across the energy sector by focusing on secure deployment and management of grid communications technologies. These workshops bring together state energy offices, utilities, and technology suppliers to explore the intersection of communications infrastructure, supply chain risks, and emerging regulatory requirements. Participants will apply Cyber-Informed Engineering (CIE) principles to reduce risks in communications systems, engage with INL’s procurement guidance, and explore future tools. Through scenario-based exercises and peer exchange, attendees will develop risk-based security strategies and actionable compliance roadmaps tailored to their grid communications projects. The workshops also help participants navigate evolving regulatory frameworks such as FEOC rules in the OBBB, NERC CIP-013, and NDAA 2024, while identifying compliance gaps in mixed-technology environments. A key outcome is the formation of a practitioner network with ongoing access to INL expertise and resources, fostering long-term resilience in the digital energy ecosystem. This is Session 2 of 3 (Full Version).

29 - ENERGY PLANNING, POLICY AND ECONOMY↗

DOE OSTI2025

Grid Communications: Cybersecurity and Supply Chain Challenges and Emerging Regulation Session Three

The TADA Grid Communications Workshops are designed to strengthen cybersecurity and digital assurance across the energy sector by focusing on secure deployment and management of grid communications technologies. These workshops bring together state energy offices, utilities, and technology suppliers to explore the intersection of communications infrastructure, supply chain risks, and emerging regulatory requirements. Participants will apply Cyber-Informed Engineering (CIE) principles to reduce risks in communications systems, engage with INL’s procurement guidance, and explore future tools. Through scenario-based exercises and peer exchange, attendees will develop risk-based security strategies and actionable compliance roadmaps tailored to their grid communications projects. The workshops also help participants navigate evolving regulatory frameworks such as FEOC rules in the OBBB, NERC CIP-013, and NDAA 2024, while identifying compliance gaps in mixed-technology environments. A key outcome is the formation of a practitioner network with ongoing access to INL expertise and resources, fostering long-term resilience in the digital energy ecosystem. This is Session 3 of 3 (Full Version).

29 - ENERGY PLANNING, POLICY AND ECONOMY↗

DOE OSTI2021

Managing Cyber Supply Chain Risk for Renewable Energy Technologies

On July 1, 2021, the U.S. Department of Energy (DOE) Office of Cybersecurity, Energy Security, and Emergency Response (CESER) hosted a virtual workshop facilitated by the National Renewable Energy Laboratory (NREL). Cybersecurity supply chain experts, researchers, and leaders in government and industry came together to share information on current and future challenges in securing emerging technologies and technical architecture. From a cybersecurity perspective, we need to move from a cybersecurity approach that focuses principally on legacy asset owners to one that incorporates more emphasis on end-point device manufacturers and third-party integrators. Cybersecurity for the global digital supply chain for manufacturers of consumer end-point devices—such as smart solar inverters and smart electric vehicle (EV) chargers—will be critical to the future cyber health of the grid.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗

DOE OSTI2024

Battery Energy Storage Systems Report

Battery energy storage systems (BESS) are a critical component of grid reliability and resilience today, providing rapid response capabilities while enabling grid modernization and capacity expansion across the United States. As utilities, communities, and customers prepare to deploy significant BESS capacity over the next several years, the United States has an opportunity to build security into battery system design and deployments. This report provides a framework for assessing the current dominance of foreign-manufactured components in the supply chains for BESS, inverter-based resources, and transformers. It offers high-impact, actionable solutions to service partners, industry, and government to address supply chain risks for currently installed, in design, and future deployments.

24 - POWER TRANSMISSION AND DISTRIBUTION↗

DOE OSTI2025

Data Centers and Digital Assurance Introduction to Supply Chain and Cybersecurity for Data Centers, Session 1

The first session of the TADA (Technical Assistance for Digital Assurance) Data Centers Cohort Workshop, held on October 30, 2025, introduced foundational concepts of Digital Assurance in the context of data center and grid integration. Sponsored by the U.S. Department of Energy, the workshop brought together utilities, data center operators, developers, and vendors to address cybersecurity and supply chain vulnerabilities. The session emphasized the growing criticality of data centers within the electric grid and the need for secure, real-time, bidirectional communication. Participants explored the principles of Digital Assurance, including cybersecurity, cyber-informed engineering (CIE), and lifecycle security, and applied a threat-vulnerability-consequence framework to identify and mitigate risks at the data center–grid interface. Discussions covered a range of threats such as spoofed dispatch signals and insider threats, architectural vulnerabilities like SCADA interfaces and insecure protocols, and potential consequences including cascading grid failures. The session also raised strategic questions about business value, vendor assurance, and defining cyber boundaries and responsibilities. This foundational workshop set the stage for deeper technical analysis and the development of actionable frameworks in subsequent sessions. Session 1 of 3.

24 - POWER TRANSMISSION AND DISTRIBUTION↗

DOE OSTI2026

Life Cycle Inventories and Data Gap Analysis for Rare Earth Elements: Neodymium and Dysprosium from Mining to Magnets

The United States demand for Neodymium-Iron-Boron (NdFeB) magnets, produced from rare earth elements (REEs) such as (Nd) and Dysprosium (Dy), far exceeds its nascent domestic production capacity, rendering it reliant on vulnerable global supply chains dominated by China. To guide research and development investments in securing U.S. REE supply, defensible benchmark metrics across environmental, economic, and social dimensions are needed. In this study, we built globally-representative, process-based cradle-to-cradle life cycle inventories for Nd and Dy in NdFeB magnets lifecycles, encompassing primary material acquisition, beneficiation, smelting and refining, metal processing, specialty alloy and chemical transformation, subcomponent manufacturing, consumer application (use phase) and end-of-life management. We carried out detailed literature review, and applied process engineering principles to build industry-representative upscaled life cycle inventories for both metals. We used these models to conduct bottom-up literature review and gap analysis on existing literature, compilation of data sources for each life cycle stage (and transformations where necessary), and a preliminary technoeconomic analysis (TEA)/life cycle costing analysis (LCCA). Findings from this work emphasize the need for metal specific, representative REE LCIs to establish robust benchmarks for advancing sustainable REE technologies and guiding R&D in REE supply chains.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗

DOE OSTI2024

Securing Critical Materials for the U.S. Electric Vehicle Industry: A Landscape Assessment of Domestic and International Supply Chains for Five Key Battery Materials

This study explores the prospective supply of upstream critical materials, providing insights into the U.S.'s capacity to meet its Electric Vehicle (EV) and Energy Storage System (ESS) deployment targets for 2035. It evaluates the proportion of critical materials demand that can be met by domestic upstream sources and the amount that will require non-U.S. sources. The analysis considers geological resources and current international development activities, contributing to the understanding of mineral supply security as the global community strives for net-zero emissions by 2050. The study focuses on five materials assessed in the 2023 DOE Critical Materials Assessment – Lithium, Nickel, Cobalt, Graphite, and Manganese.

33 ADVANCED PROPULSION SYSTEMS↗

DOE OSTI2020

Voluntary Renewable Energy Procurement Programs in Regulated Utility Markets

Multinational corporations are increasingly purchasing renewable energy (RE) to fulfill international commitments, reduce supply chain emissions, limit environmental impact, and secure stable and affordable electricity. The potential scale of global corporate RE purchasing has been estimated to be nearly 100 GW and growing; however, many markets still lack supportive enabling environments for corporations to access RE through on-site project development or private sector transactions. Even where allowed by law, on-site generation may be insufficient due to space and technical constraints, introducing additional challenges. Utility green pricing and utility green tariff programs backed by renewable energy certificates (RECs), referred to as utility green procurement programs (GPPs) in this report, offer powerful market-based solutions to utilities, regulators, and policymakers to provide corporate and other consumers with RE product options while generating revenue to support RE development. As RE markets expand around the globe, GPPs have proven to be effective mechanisms in market regimes, ranging from fully integrated state-owned utilities to broadly liberalized power markets. GPPs utilize RECs, which are a type of energy attribute certificate and closely resemble guarantees of origin, to track and ultimately monetize RE attributes that corporations and other buyers must procure to demonstrate progress against their RE commitments and make public claims of RE use. Time-tested and transparent REC accounting mechanisms provide market confidence, while at the same time offering flexibility to utilities, regulators, and customers for a range of applications. RECs are used in all types of electricity market structures, as indicated in Figure 1, but REC-based program designs and supporting components differ depending on the type of market. Liberalized markets allow for customers to contract directly with generators for electricity and RECs, while traditionally regulated markets with vertically integrated utility structures may have greater restrictions on generation asset ownership and electricity sales. RE markets can be further defined as being either mandatory or voluntary. Mandatory markets require suppliers to deliver specified amounts of RE to grid customers, such as under a renewable portfolio standard (RPS), while voluntary markets involve no legal mandates, but demand is driven by self-imposed customer goals.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗

DOE OSTI2024

Multi-functional Sorbent Development for Separation of Critical Minerals and Pollutants

Critical Metals (CMs), including Rare Earth Elements (REEs), aluminum, manganese, cobalt, and others outlined by the U.S. Department of the Interior’s Geological Survey are essential to the national and economic security of the US, and whose supply chain is susceptible to disruption. Because of the negative environmental impacts inherent with the conventional mining and processing of solid ores for CMs, adsorption-based recovery of naturally dissolved species from coal wastewaters is appealing. Acid mine drainage (AMD) remains a relatively untapped source that can be rich in REEs, and especially in Al, Mn, and other CMs. NETL’s Multi-functional Sorbent Technology (MUST) has been developed originally from the functionalized silica sorbents for carbon capture. Ongoing work aims to find AMD sites enriched with either REEs or other CM, and to perform additional field tests at these sites. Overall, our work shows the viability of recovering CMs from AMD and other coal waste streams, using a fixed-bed adsorption system that can also employ a selective elution technique to achieve highly purified metal resources.

Shi, Fan↗

DOE OSTI2020

Foreward: Advancing the U.S. Offshore Renewable Energy Industry through Marine Renewable and Offshore Wind Energy Development

Foreward to special issue of MTSJ Journal: Energy security … it’s what everyone is talking about, and for good reason. Against the backdrop of a changing climate in which nearly two-thirds of electricity generation is credited to fossil fuels (IEA, 2019a), countries around the world are diversifying their energy portfolios, suppliers, and energy routes to reduce vulnerabilities to energy security risks (U.S. Chamber of Commerce, 2020). Energy security concerns are related to fuel supply chains, electricity generation, transmission, distribution, energy market functionality, and energy system resiliency (DOE, 2017). These concerns demonstrate the need for well-functioning and competitive energy markets and diverse sources and routes of energy supply (DOE, 2017). In addition, environmental protection, efficiency and infrastructure improvements, energy innovation, emergency response, and resilience are also needed (DOE, 2017). Renewable energy generation is, and will continue to be, a major contributor in energy portfolio diversification, which will reduce reliance on foreign energy sources (IEA, 2019b; Aslantürk & Kiprizli, 2020) and support global decarbonization (Sims, 2004; Rockström et al., 2017; Arabzadeh et al., 2020).

marine renewable energy (MRE), offshore wind energ↗

DOE OSTI2025

Cyber-Informed Engineering (CIE) Guide for States

The Cyber-Informed Engineering (CIE) Guide for States provides state energy offices, public utility commissions, and partner organizations with a structured framework for integrating cyber-resilient engineering practices into energy planning, grantmaking, interconnection processes, and workforce development. As grid digitalization and the adoption of distributed energy resources accelerate, states face expanding cyber-physical risks that traditional cybersecurity measures alone cannot fully address. CIE offers a proactive, consequence-focused engineering methodology that emphasizes eliminating or mitigating high-impact failure modes through design, physical controls, and operational safeguards. The guide outlines the 12 core CIE principles, demonstrates their application through state-focused use cases—including grant evaluation rubrics, interconnection reviews, allow-list development, and training programs—and provides practical tools such as scoring frameworks, impact assessment methods, and implementation checklists. It also highlights pathways for state–utility collaboration and opportunities for technical assistance from national laboratories. By adopting CIE, states can enhance grid reliability, reduce lifecycle costs, strengthen supply-chain assurance, and foster a security-aware engineering culture that aligns with broader resilience and modernization goals. November 2025

29 ENERGY PLANNING, POLICY, AND ECONOMY↗

DOE OSTI2025

Cyber-Informed Engineering (CIE) Guide for States

The Cyber-Informed Engineering (CIE) Guide for States provides state energy offices, public utility commissions, and partner organizations with a structured framework for integrating cyber-resilient engineering practices into energy planning, grantmaking, interconnection processes, and workforce development. As grid digitalization and the adoption of distributed energy resources accelerate, states face expanding cyber-physical risks that traditional cybersecurity measures alone cannot fully address. CIE offers a proactive, consequence-focused engineering methodology that emphasizes eliminating or mitigating high-impact failure modes through design, physical controls, and operational safeguards. The guide outlines the 12 core CIE principles, demonstrates their application through state-focused use cases—including grant evaluation rubrics, interconnection reviews, allow-list development, and training programs—and provides practical tools such as scoring frameworks, impact assessment methods, and implementation checklists. It also highlights pathways for state–utility collaboration and opportunities for technical assistance from national laboratories. By adopting CIE, states can enhance grid reliability, reduce lifecycle costs, strengthen supply-chain assurance, and foster a security-aware engineering culture that aligns with broader resilience and modernization goals. November 2025

29 - ENERGY PLANNING, POLICY AND ECONOMY↗

DOE OSTI2020

International Symposium on Transport Security of Nuclear and other Radioactive Material; Tokyo, Japan, November 2019

As an outcome of the Fourth Nuclear Security Summit of 2016, held in Washington D.C., the Governments of Australia, Canada, Czech Republic, Finland, France, Hungary, Italy, Japan, Kazakhstan, Morocco, Spain, the Republic of Korea, Thailand, the United Kingdom, and the United States reaffirmed, through INFCIRC/909, their will to further improve the overall security in the transport of nuclear and other radioactive materials. With this goal in mind, each expressed their commitment to further exchange national practices with other countries through the IAEA and the Global Initiative to Combat Nuclear Terrorism (GICNT). They also committed to actively support the IAEA as the central organization for coordinating activities and developing guidance documents and to support the GICNT and the Global Partnership Against the Spread of Weapons and Materials of Mass Destruction in developing and implementing its nuclear transport security activities. Both of these organizations address the commitments regarding nuclear transport security as outcomes of the Nuclear Security Summit 2016. In an effort to continue the momentum from the Nuclear Security Summit, the Government of Japan, in cooperation with the Integrated Support Center for Nuclear Nonproliferation and Nuclear Security of Japan Atomic Energy Agency (ISCN/JAEA), hosted the International Transport Security Symposium in November 2019. With over fifty countries invited to attend, the event exchanged and promoted good practices in several topical area sessions related to the security of nuclear and other radioactive material in transport. Topical sessions included Laws and Regulatory Framework, Physical Protection Systems, Response Actions, and Insider/Information Security. The Symposium built support for transport security and encouraged IAEA Member States to actively work regionally and internationally with the IAEA’s transport security programme through the practical implementation and incorporation of IAEA Nuclear Security Series recommendations and guidance into their national frameworks for transport security. From these sessions, to the host detailed a recommended path forward for future engagements in the security of nuclear and radioactive material in transport. The paper will discuss the Symposium’s outcomes and highlight the forward momentum made by both signatories and non-signatories for the strengthening of all the critical elements of a State’s transport security regime, including physical protection systems, insider threats to the nuclear and radioactive material supply chains, planning and capabilities for law enforcement response to malicious transport security events, and employment of technology to address critical vulnerabilities to the transport of nuclear and other radioactive materials.

Holt, Katherine↗

DOE OSTI2022

Achieving American Leadership in the Rare Earth Magnets Supply Chain Factsheet

Rare earth permanent magnets are a critical technology for the clean energy transition and electrified transport revolution. The global supply chain for rare earth metals and magnets is almost completely dominated by China, which controlled 58% of rare earth mining and 92% of magnet manufacturing in 2020. The United States produces only 15% of the global supply of raw materials for these magnets, and while the nation has several nascent downstream processing and manufacturing efforts, current domestic production is limited. Investments and incentives to boost the domestic supply chain, especially in the separation and refining phases, point the way to securing stable supplies of these critical clean energy components.

Source record↗

DOE OSTI2022

Recent advances in the global rare-earth supply chain

The current global rare-earth element (REE) supply chain is highly imbalanced and tightly controlled by just a few countries. Such an imbalance of the critical metals supply chain poses a significant challenge to the energy-transition strategies and the national security of many countries. As such, this issue of MRS Bulletin delves into the materials science aspects of the REE supply chain, including fundamental REE mineralogy, REE separation and extraction, REE mining economics, the environmental impacts of REE mining and processing, and circular economy potential for REEs. This issue of MRS Bulletin is meant to inform the materials science community of some of the constraints on REE production from the mining of ore deposits, through processing technologies, and then finally, the possibility of recycling.

99 GENERAL AND MISCELLANEOUS↗

DOE OSTI2021

Towards a New Supply Chain Cybersecurity Risk Analysis Technique

Supply chain cyber-attacks, such as the SolarWinds Orion attack, are occurring with greater frequency. These attacks compromise a digital device before it is sent to customers, bypassing traditional security controls to remain persistent and undetected in operational environments. While supply chain attacks are prevalent, methods for analyzing the risk of these attacks are currently unavailable. This paper proposes new supply chain cyber-attack difficulty and risk metrics to evaluate the relative risk of an attack throughout the supply chain lifecycle. Difficulty metrics for each stakeholder in a digital device’s supply chain (e.g., hardware manufacturing, firmware development, software development, storage, and distribution entities) are calculated using scores from cybersecurity maturity questionnaires in a Bayesian Network leaky Noisy-MAX model. These difficulty metrics are then used to calculate an overall supply chain cyber-attack risk. Vulnerability and recoverability metrics are also proposed to evaluate the relative stakeholder influence in the attack risk. These proposed relative risk metrics enable continuous supply chain monitoring, provide decision-makers with information necessary for improved supplier selection, and help drive improvements in the cybersecurity posture of the stakeholders in their supply chain.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

DOE OSTI2022

A Cryptographic Method for Defense Against MiTM Cyber Attack in the Electricity Grid Supply Chain

Critical infrastructures such as the electricity grid can be severely impacted by cyber-attacks on its supply chain. Hence, having a robust cybersecurity infrastructure and management system for the electricity grid is a high priority. This paper proposes a cyber-security protocol for defense against man-in-the-middle (MiTM) attacks to the supply chain, which uses encryption and cryptographic multi-party authentication. A cyber-physical simulator is utilized to simulate the power system, control system, and security layers. The correctness of the attack modeling and the cryptographic security protocol against this MiTM attack is demonstrated in four different attack scenarios.

Paul, Shuva↗