Standards · Energy

IEEE C37.240-2014 IEEE Standard Cybersecurity Requirements for Substation Automation, Protection, and Control Systems

WithdrawnPaid · 30 January 2015

Standards are protected by copyright and almost always sold: here you find metadata, an original summary and a link to the official catalogue page where they can be consulted or bought. The text is not reproduced.

Summary

The standard set technical cybersecurity requirements for substation automation, protection and control systems, regardless of voltage level or criticality: remote and local access, authentication, encryption of communications, patch management, and event logging and monitoring. It sought a balance between technical feasibility, cost and expected risk, and was long used alongside IEEE 1686 and NERC CIP in North American utility projects.

Reference

IEEE C37.240-2014

Official title

IEEE Standard Cybersecurity Requirements for Substation Automation, Protection, and Control Systems

Body

IEEE – Technical committee: IEEE PES Power System Communications and Cybersecurity Committee

Type

Standard

Status

Withdrawn

Published

30 January 2015

Access to the text

Paid

Sectors

• Energy
• OT and cyber-physical systems (ICS/SCADA)

Notes

IEEE inactivated it on 27 March 2025 (status “Inactive-Reserved”): it can still be bought as a reference but is no longer maintained.

Last verified

29 October 2026 (verified via web)

Metadata and summary: CC BY 4.0 · JSON

Report an error in this record (opens in a new tab)