1 Scope

1.1 This Standard applies to the cybersecurity evaluation for network connected, software operated endpoint devices that manage significant energy flows and that collectively pose an aggregated risk to grid stability. Covered endpoint devices or combinations of devices include Distributed Energy Resources (DERs), Inverter-Based Resources (IBR), smart inverters, monitoring devices, control devices, and electric vehicle supply equipment (ESVE).

1.2 This Standard describes the minimum basic and advanced cybersecurity requirements. This Standard does not contain the methods of validation of these requirements. This Standard is written in a way that the choice of implemented technology is the manufacturer’s decision.

1.3 This Standard does not contain requirements regarding functional testing of the Equipment Under Test (EUT). This means this Standard contains no requirements specifying how to assess that the EUT functions perform as designed. This Standard does not contain requirements to cover system level testing.

Summary of Topics

This is the First Edition of UL 2941, the Standard for Cybersecurity of Distributed Energy and Inverter-Based Resources, dated December 10, 2025.