Topic #: CW26-T08 · Branch: DOE · Status: Open
The Office of Cybersecurity, Energy Security, and Emergency Response (CESER) seeks innovative technologies, tools, and methods that strengthen the cybersecurity, resilience, and operational continuity of the Nation’s energy infrastructure and associated systems. CESER’s mission priorities emphasize advancing cyber-risk discovery, mitigation, and response; accelerating technology transition for energy-sector security; enhancing situational awareness; and supporting the operational readiness of utilities and critical energy facilities. In alignment with recent CESER R&D portfolios, including efforts in advanced cybersecurity applications, industrial control systems (ICS) testing, cyber-informed engineering, supply-chain security, risk analytics, and resilience preparedness – this topic invites solutions that can mature into commercially viable capabilities for industry adoption.
Posted: 10/30/2026 · Opens: 10/30/2026
This button copies the full topic as plain text: the work, the dates, the apply steps, and the readiness list. Paste it into the AI you already use. Ask it if the work fits your firm, what you are missing, and what to skip.
This call starts with a short pitch, not a full proposal. Use the copy to judge the fit and shape the pitch. The call follows SBA policy: no limit on AI help, and no disclosure is required. Your firm signs the pitch and answers for every claim in it.
The first step is a short pitch, on the ConnectWerx site.
ApplySelect Apply. The official call page opens on the ConnectWerx site. The first step is a short pitch in the ATI portal. Full proposals are by invitation only.
Send this topic to a partner. The link opens this page.
Eligibility comes first. SBIR and STTR awards go to small businesses: for-profit, based in the United States, 500 or fewer employees counting every domestic and foreign affiliate, and at least 51 percent owned and controlled by U.S. citizens or permanent residents. A company owned by a large parent usually cannot apply on its own. It can take part as a subcontractor under an eligible small business.
An ATI portal account is set up for the person who will submit the pitch. Pitches go in through the portal, and the account takes time to set up. To pitch, the portal account is what you need.
If your pitch is invited, the full application needs SAM.gov entity registration active. Start it now: a new registration takes 10 or more business days to become active.
If your pitch is invited, the full application needs the SBA Company Registry complete. You get a SBC Control ID. Start it now: identity checks cannot be rushed.
The first step is a pitch: 4 narrative questions, 3 short-answer questions, and 7 structured selection questions, due by the date above at 2:00 p.m. Eastern. Full proposals are by invitation only. Plan to submit the pitch early.
Most topics need more than one small company can give. When people join a team, the members can cover the full scope of the topic together. Your email address stays private. Other members contact you through this site first.
Fill in the form to add your name to this list. Enter your role, a short text about what you bring, and your email address.
Send this page. It is the direct route: the link opens this topic, with the apply steps on it. The official listing opens a search page, and you need the topic number to find this topic there.
The Office of Cybersecurity, Energy Security, and Emergency Response (CESER) seeks innovative technologies, tools, and methods that strengthen the cybersecurity, resilience, and operational continuity of the Nation’s energy infrastructure and associated systems. CESER’s mission priorities emphasize advancing cyber-risk discovery, mitigation, and response; accelerating technology transition for energy-sector security; enhancing situational awareness; and supporting the operational readiness of utilities and critical energy facilities. In alignment with recent CESER R&D portfolios, including efforts in advanced cybersecurity applications, industrial control systems (ICS) testing, cyber-informed engineering, supply-chain security, risk analytics, and resilience preparedness – this topic invites solutions that can mature into commercially viable capabilities for industry adoption.
Technological innovation is essential as energy systems become more distributed, digitally integrated, and exposed to evolving cyber and physical threats. Applicants are encouraged to propose novel architectures, SI-enabled analytic methods, advanced hardware or firmware security approaches, resilient operational technologies, and next-generation mitigation or response tools that address high-impact risks across electric, oil, natural gas, and emerging energy systems. Solutions that support operational resilience, including improved threat detection, attack containment, autonomous response, system recovery, or hardened design principles, are of interest.
Proposals may address any stage of the cyber-resilience ecosystem: vulnerability identification, threat-informed engineering, grid-architecture-based risk assessments, secure-by-design component development, supply-chain assurance concepts, or technologies that facilitate rapid restoration after compromise or disruption.
Topics should emphasize strong potential for commercialization, interoperability with energy-sector environments, and applicability to energy sector operations and mission-critical infrastructure. While technical creativity is encouraged, solutions must remain grounded in CESER’s mission space, which includes cybersecurity for operational technology, industrial control systems, digital component supply chains, advanced analytics, and resilience measures for grid operations.
A broad range of technical approaches may be responsive to this topic provided they advance cybersecurity and resilience outcomes in the energy sector, promote cost-effective operational deployment, and demonstrate a pathway to measurable impact on sector security and continuity.