A microgrid is a localised electricity network that can operate connected to the main grid or independently. It combines generation, storage and control systems to supply a defined site such as a campus or factory, and uses switching, protection and load management to keep power stable during islanded operation.
What microgrids are in security and resilience terms
A microgrid is not just a small power network, it is a controlled electrical system with its own generation, storage, protection and operating logic. Its defining feature is the ability to disconnect from the main grid and keep serving a defined site while maintaining stability.
That independence makes microgrids relevant to cybersecurity, operational continuity and physical resilience. The control plane is as important as the wires and batteries, because switching decisions, load shedding and protection settings determine whether the site remains powered safely during disturbance.
How microgrids operate in connected and islanded modes
When connected to the utility grid, a microgrid can import power, export excess generation, or coordinate with the wider system. In islanded mode, it must balance local generation and load in real time, often under tighter tolerance for frequency and voltage variation.
This dual mode creates a design challenge: the system must transition cleanly between external dependency and self-sufficiency. If the transition is poorly managed, the result can be instability, nuisance trips, or loss of critical loads exactly when the site needs continuity most.
Core components and control dependencies
Microgrids usually combine distributed generators, batteries or other storage, inverters, protection relays, meters and supervisory control systems. Those components must work together so the network can sense faults, isolate them and rebalance supply without destabilising the site.
The most important dependency is coordination. Protection settings, telemetry quality and control logic must align, otherwise the system may overreact to benign fluctuations or fail to react quickly enough to a real fault. In practice, microgrids are cyber-physical systems, so availability and integrity of control data matter as much as hardware capacity.
For practitioners, this makes segmentation, access control and monitoring essential to the operating model. A resilient design assumes that the control network, field devices and remote management paths are all potential failure points, not just the power equipment.
Why microgrids matter for critical sites
Microgrids are used where continuity matters more than convenience, such as campuses, factories, hospitals and other facilities with sensitive operational loads. They can reduce exposure to grid outages, support local resilience and improve recovery options after a wider power failure.
They also introduce concentrated dependency. If local generation, storage, controls or switching logic are impaired, the site may lose both its backup capability and its normal operating mode. That is why microgrid design is often paired with broader resilience planning, including manual fallback procedures and tested restoration paths.
Risk and Threat Considerations
Microgrids concentrate operational dependency into a small number of control systems, so a fault, misconfiguration or malicious action can have immediate physical consequences. The main risk is not only loss of power, but loss of controlled transfer between grid-connected and islanded operation.
Failure mechanism: Inaccurate telemetry, compromised supervisory control, or incorrect protection settings can trigger false trips, prevent safe islanding, or leave faults unisolated while critical loads are still expected to remain online.
Impact: The result can be service interruption, equipment damage, unsafe operating conditions, and prolonged recovery if the microgrid cannot re-synchronise or restore stable power quickly.
Standards & Framework Alignment
This section maps relevant standards and security frameworks to the operational risks and controls described in this guidance.
NIST CSF 2.0, NIST SP 800-53 Rev 5 and CIS Controls v8 set the governance and control requirements practitioners need to meet.
| Framework | Control / Reference | Relevance |
|---|---|---|
| NIST CSF 2.0 | GV.RM-01 — Risk Management Strategy | Microgrids are resilience-critical systems with concentrated operational risk. |
| PR.PS-04 — Configuration Management | Microgrid stability depends on protected switching, relay and control configurations. | |
| Recommendation — Define microgrid risk tolerance and continuity objectives before setting control dependencies. Control and review microgrid configuration changes that affect protection and islanding. | ||
| NIST SP 800-53 Rev 5 | SC-45 — System Time Stamps | Coordinated monitoring and event correlation in control environments depend on trusted timing. |
| Recommendation — Synchronize microgrid monitoring and event logs to support accurate fault analysis. | ||
| CIS Controls v8 | CIS-12 — Network Infrastructure Management | Microgrids depend on segmented, managed control networks and reliable infrastructure governance. |
| Recommendation — Segment and manage microgrid control networks to reduce disruption and unsafe access paths. | ||
Practitioner Guidance
What to watch for: Treat microgrid control as a high-value operational environment, not a simple facilities add-on. The key governance question is who can change switching logic, protection settings and remote management access, because those functions directly affect safety and continuity.
Practitioner takeaway: The strongest microgrid designs assume both cyber compromise and control failure are plausible, then build monitoring, fallback and restoration processes around that assumption.