A digital twin is a context-dependent digital representation connected to a real-world entity or process through an ongoing exchange of data. It may support observation, analysis, prediction, optimization, or control. Definitions differ across industries, so architecture and authority matter more than the label alone.
A relationship, not only a model
The useful security distinction is the maintained relationship between physical or operational state and a digital representation. Sensors, gateways, networks, ingestion pipelines, models, APIs, people, and controllers may all participate.
Definitions vary
A digital model may have no automated synchronization. A digital shadow generally emphasizes physical-to-digital flow. A twin usually implies a dynamic relationship and may be bidirectional, but there is no single universally accepted definition across all sectors.
Security consequence
Ask what the system observes, predicts, recommends, or controls; which state is authoritative; and what occurs when the relationship becomes false, stale, unavailable, or unauthorized.
Related resources
References
- NIST IR 8356: Security and Trust Considerations for Digital Twin TechnologyNIST · 2025 · Government research publication
Primary NIST treatment of digital-twin characteristics, cybersecurity, and trust considerations.
- NIST IR 8620: Digital Twins Workshops Summary ReportNIST · 2026 · Government research publication
Workshop findings and open issues for digital-twin definitions, interoperability, trust, security, and standards.