IEEE 1686
What is IEEE 1686?
IEEE Standard for IED Cyber Security Capabilities for substations. It comprises 14 controls organised across 5 domains, published by IEEE, and applies in International.
How IEEE 1686 maps to other frameworks
All 14 controls, each one mapped to the equivalent requirement in other standards, with the evidence that carries across and the mappings that were judged and rejected shown alongside. No account needed to look.
See the control mappings →The 5 domains IEEE 1686 groups its controls into
Frameworks that share controls with IEEE 1686
Each of these has at least one control mapped to a control in IEEE 1686. The number is how many IEEE 1686 controls are shared, counted from the mapping graph.
IEC 62443
6 shared controlsAPI 1164
6 shared controlsOWASP DevSecOps Maturity Model (DSOMM)
5 shared controlsNIST SP 800-171A Rev 3 - Assessing CUI Security Requirements
5 shared controlsFFIEC Cybersecurity Assessment Tool (CAT)
5 shared controlsIAEA Nuclear Security Series - Computer Security at Nuclear Facilities (NSS-17-T Rev 1)
5 shared controlsOWASP ASVS
5 shared controlsMITRE D3FEND
5 shared controlsWhere IEEE 1686 overlaps with the standards you already hold
Where to get trained on IEEE 1686
One course in the catalogue covers IEEE 1686 directly. Each is self-paced, includes the downloadable toolkit and the implementation playbook, and carries a certificate of completion.
Training more than one person? Ten seats of any course is $1,490 on a single licence, against $199 a seat bought one at a time.
What IEEE 1686 means in your sector
What IEEE 1686 means for your job
Questions people ask about IEEE 1686
What is IEEE 1686?
How many controls does IEEE 1686 have?
Where does IEEE 1686 apply?
What frameworks does IEEE 1686 map to?
How do I get started with IEEE 1686 compliance?
Query IEEE 1686 programmatically
IEEE 1686, its 14 controls and every mapping into other standards are available over a REST endpoint and an MCP server, so an agent can read them directly. The free tier is 10 calls a day and needs no signup.
IEEE 1686 API reference and MCP config →What IEEE 1686 requires, control by control
Each page carries the requirement text for one IEEE 1686 control and what an assessor expects to see as evidence.
- IR-RECOVERY-REPORTING-EXERCISES-DRILLS-RECOV IEEE 1686 - Incident Response + Recovery from Failed Update + Reporting to Authorities + Coordination with Sector-Specific Agencies + Exercises and Drills
- SCOPE-IED-SUBSTATION-AUTOMATION-2022-IEC-NERC-NIST-COORD IEEE 1686 - Scope + Intelligent Electronic Devices (IEDs) + Substation Automation + 2022 Edition + Coordination with IEC 62351 + IEC 62443 + NERC CIP + NIST SP 800-82
- SECTION5-1-ACCESSCONTROL-ACCOUNTS-ROLES-PASSWORD-SESSION-REMOTE IEEE 1686 Section 5.1 - Electronic Access Account Management + Roles + Password + Failed Login + Session + Remote Access + Personnel
- SECTION5-2-5-3-AUDITLOG-RETENTION-EXPORT-MONITORING IEEE 1686 Section 5.2 + 5.3 - Audit Trail Records + Retention + Export + Supervisory Monitoring and Control + Network Security Monitoring
- SECTION5-5-5-6-5-7-5-8-FIRMWARE-CONFIGSW-TIMESYNC-DATAATREST IEEE 1686 Section 5.5-5.8 - Firmware Quality + Configuration Software Security + Time Synchronisation + Data Protection at Rest + Patch + Malware + Hardening + Vulnerability
- SUPPLYCHAIN-DOCUMENTATION-PROCUREMENT-COMPLIANCETABLE-PHYSICAL IEEE 1686 Section 6 IED Security Documentation + Supply Chain + Procurement Specification + Appendix A Compliance Table + Physical and Tamper
How ready are you for IEEE 1686?
Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.