Energy sector

Because of all these dependencies on ICT, a disruption in the electricity supply can have a major impact in society, especially disruptions that last for a long time. These can trigger a cascade of effects in other sectors of society. Many of these disruptions will be entirely unexpected.

ENISA not only has a major role in the implementation of the NIS Directive but also in supporting Member States and the private sector in achieving a higher level of cybersecurity. In order to do this, it has conducted numerous activities and studies in the area of cybersecurity in the Energy Sector, as well as industrial control and SCADA systems, in close collaboration with stakeholders from the public and the private sector.

The Agency has engaged all relevant stakeholders and contributed to the European Commission’s policy initiatives, for example the electricity network code, DG Energy Expert Group 2 and the CEN/CENELEC Mandate 490. To ensure effective information flows on evolving threats and to facilitate the response to cyber incidents, Information Sharing and Analysis Centres (ISACs) should be encouraged to engage with all relevant bodies. ENISA is already a member of the existing European Energy ISAC.