Dams Sector Cybersecurity Framework Implementation Guidance

The Framework offers a flexible way to address cybersecurity. It is applicable to organizations relying on technology, including information technology (IT), industrial control systems (ICS), cyber-physical systems (CPS), or connected devices including the Internet of Things (IoT). It complements, but does not replace, an organization’s risk management process, cybersecurity program, or related framework implementation; every organization must decide how to individually implement the Framework.

This document is an update to the 2015 Dams Sector Cybersecurity Framework Implementation Guidance document, which was based on the Version 1.0 of the Framework for Improving Critical Infrastructure Cybersecurity by NIST released in 2014. In 2018, the Framework was updated to Version 1.1 which was leveraged to update Dams Sector Cybersecurity Framework Implementation Guidance document.