Architecture
Document physical assets, sensing and actuation, edge gateways, transport, ingestion, twin services, model execution, operator interfaces, enterprise integrations, and every path capable of producing or authorizing a physical effect.
Critical assets and consequences
public safety, equitable service, privacy, infrastructure continuity, and cross-agency trust.
Consequences depend on deployment context. Evaluate unsafe control, silent quality loss, incorrect maintenance, privacy exposure, service interruption, damaged evidence, and cascading dependencies.
Primary trust boundaries
Prioritize device-to-gateway identity, gateway-to-platform transport, source-to-record provenance, data-to-model assumptions, model-to-decision logic, and decision-to-controller authorization.
Defensive priorities
- Inventory every physical/digital relationship and owner.
- Authenticate data sources and retain usable provenance.
- Separate analytic recommendations from control authority.
- Monitor cyber state alongside physical process invariants.
- Exercise safe degraded operation and evidence-preserving recovery.
Research questions
- Which state must be authoritative when trusted sources disagree?
- What evidence is required before model output can influence operations?
- How can the system remain safe when synchronization or connectivity fails?
References
- NIST IR 8356: Security and Trust Considerations for Digital Twin TechnologyNIST · 2025 · Government research publication
Primary NIST treatment of digital-twin characteristics, cybersecurity, and trust considerations.
- NIST SP 800-82 Rev. 3: Guide to Operational Technology (OT) SecurityNIST · 2023 · Government guidance
Security guidance for OT while accounting for performance, reliability, and safety requirements.
- NIST SP 800-160 Vol. 1 Rev. 1: Engineering Trustworthy Secure SystemsNIST · 2022 · Systems-security engineering guidance
Principles and life-cycle activities for engineering trustworthy secure systems.