IEEE 1686: every control, and what you already have

26 controls 95 frameworks share controls with it International (power sector) verified against its source document

Every control below is one this framework asks for. The right hand column counts how many other frameworks in our corpus carry the same control, which is the difference between doing this work once and doing it again for the next standard.

IEEE 1686 IED Cyber Security Capabilities Evidence & Implementation Kit

26 controls is the documentation set somebody has to write. This is that set, already written: an adopt-ready artifact for every control in policy and procedure text you edit rather than draft, and the evidence checklist an auditor asks for against each.

See what is in it, $249

The same set every buyer of this kit receives. Nothing here is produced on request.

What you already have

Frameworks whose controls overlap this one, most first. If you run any of them, the count is roughly what you have already evidenced.

If you run	Shared controls
API 1164	6	measure it →
CISA Cross-Sector Cybersecurity Performance Goals (CPG) 2.0	6	measure it →
IEC 62443	6	measure it →
ISO/IEC 27010:2015	6	measure it →
AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association)	5	measure it →
BSI IT-Grundschutz	5	measure it →
FFIEC Cybersecurity Assessment Tool (CAT)	5	measure it →
IAEA Nuclear Security Series	5	measure it →
ISO/IEC 27011:2024	5	measure it →
MITRE D3FEND	5	measure it →
OWASP ASVS	5	measure it →
OWASP DevSecOps Maturity Model (DSOMM)	5	measure it →

Every control

Code	Control	Also in
`IEEE1686-IR-Recovery-Reporting-Exercises-Drills-RECOV`	IEEE 1686 - Incident Response + Recovery from Failed Update + Reporting to Authorities + Coordination with Sector-Specific Agencies + Exercises and Drills	80
`IEEE1686-Scope-IED-Substation-Automation-2022-IEC-NERC-NIST-Coord`	IEEE 1686 - Scope + Intelligent Electronic Devices (IEDs) + Substation Automation + 2022 Edition + Coordination with IEC 62351 + IEC 62443 + NERC CIP + NIST SP 800-82	13
`IEEE1686-Section5.1-AccessControl-Accounts-Roles-Password-Session-Remote`	IEEE 1686 Section 5.1 - Electronic Access Account Management + Roles + Password + Failed Login + Session + Remote Access + Personnel	59
`IEEE1686-Section5.2-5.3-AuditLog-Retention-Export-Monitoring`	IEEE 1686 Section 5.2 + 5.3 - Audit Trail Records + Retention + Export + Supervisory Monitoring and Control + Network Security Monitoring	29
`IEEE1686-Section5.4-Communications-PortAccess-EncryptedRemote-Crypto`	IEEE 1686 Section 5.4 - Communication Port Access + Encrypted Remote + Cryptography + Ports and Services + IEC 61850 + IEC 60870-5 + DNP3 SAv5	0
`IEEE1686-Section5.5-5.6-5.7-5.8-Firmware-ConfigSW-TimeSync-DataAtRest`	IEEE 1686 Section 5.5-5.8 - Firmware Quality + Configuration Software Security + Time Synchronisation + Data Protection at Rest + Patch + Malware + Hardening + Vulnerability	44
`IEEE1686-SupplyChain-Documentation-Procurement-ComplianceTable-Physical`	IEEE 1686 Section 6 IED Security Documentation + Supply Chain + Procurement Specification + Appendix A Compliance Table + Physical and Tamper	45
`1-4`	Scope, purpose, references, definitions and use of the standard	0
`5.1`	Identification and authentication	0
`5.1.2.1`	User identification and authentication for local and remote access	0
`5.1.2.2`	Password construction and display	0
`5.1.2.3`	Access timeout	0
`5.1.2.4`	Password defeat mechanisms	0
`5.1.2.5`	Number of individual users	0
`5.2`	Authorization and access	0
`5.2.2`	Authorization levels and role-based access control	0
`5.2.3`	IED main security functions subject to authorization	0
`5.3`	Data integrity	0
`5.4`	Data confidentiality, including encrypted serial communications	0
`5.5`	IED response to cybersecurity events	0
`5.5.2`	Event record storage capability and record content	0
`5.5.3`	Cybersecurity event types, alarms and reporting	0
`5.6`	Resiliency: communications port access, functionality compromise and protocol security	0
`5.7`	Firmware quality control	0
`A`	Table of conformance for the IED	0
`B-C`	Annex B certificate management and Annex C IED lifecycles (informative)	0

Tell me when IEEE 1686 files something new

One email when a public company newly discloses something this framework governs, naming the company and what our corpus says it puts in scope. Nothing else, and one click to stop.

What this page is

A control-level reference for IEEE 1686, drawn from our framework corpus. Control codes and titles are references to the standard, not reproductions of it. The overlap counts and the auditor artefacts are our own work and are the part you will not find elsewhere.

Measure this against what you already run · All frameworks · Today's edition