Security Magazine logo
search
cart
facebook twitter linkedin youtube
  • Sign In
  • Create Account
  • Sign Out
  • My Account
Security Magazine logo
  • NEWS
    • Security Newswire
    • Technologies & Solutions
  • MANAGEMENT
    • Leadership Management
    • Enterprise Services
    • Security Education & Training
    • Logical Security
    • Security & Business Resilience
    • Profiles in Excellence
  • PHYSICAL
    • Access Management
    • Fire & Life Safety
    • Identity Management
    • Physical Security
    • Video Surveillance
    • Case Studies (Physical)
  • CYBER
    • Cybersecurity News
    • More
  • BLOG
  • COLUMNS
    • Cyber Tactics
    • Leadership & Management
    • Security Talk
    • Career Intelligence
    • Leader to Leader
    • Cybersecurity Education & Training
  • EXCLUSIVES
    • Annual Guarding Report
    • Most Influential People in Security
    • The Security Benchmark Report
    • The Security Leadership Issue
    • Top Guard and Security Officer Companies
    • Top Cybersecurity Leaders
    • Women in Security
  • SECTORS
    • Arenas / Stadiums / Leagues / Entertainment
    • Banking/Finance/Insurance
    • Construction, Real Estate, Property Management
    • Education: K-12
    • Education: University
    • Government: Federal, State and Local
    • Hospitality & Casinos
    • Hospitals & Medical Centers
    • Infrastructure:Electric,Gas & Water
    • Ports: Sea, Land, & Air
    • Retail/Restaurants/Convenience
    • Transportation/Logistics/Supply Chain/Distribution/ Warehousing
  • EVENTS
    • Industry Events
    • Webinars
    • Solutions by Sector
    • Security 500 Conference
  • MEDIA
    • Videos
      • Cybersecurity & Geopolitical Discussion
      • Ask Me Anything (AMA) Series
    • Podcasts
    • Polls
    • Photo Galleries
  • MORE
    • Call for Entries
    • Classifieds & Job Listings
    • Continuing Education
    • Newsletter
    • Sponsor Insights
    • Store
    • White Papers
  • EMAG
    • eMagazine
    • This Month's Content
    • Advertise
  • SIGN UP!
CybersecurityManagementSecurity Leadership and ManagementLogical SecuritySecurity & Business ResilienceCybersecurity NewsInfrastructure:Electric,Gas & Water

Collaboration is key to energy sector cyber defense

By Pierre-Alain Graf
power lines
May 26, 2022

Energy is a backbone of society, and there are many direct connections between energy use and quality of life. Reliable access to electricity has proven to reduce poverty — alongside other efforts around sanitation, nutrition and access to clean water — while minimizing the emission of home pollutants and increasing opportunities for workers. This makes it both a highly desired commodity and a precious resource that the world needs to proactively protect.

Unfortunately, the energy industry is becoming an increasingly tempting target for cybercriminals and nation-states that seek to disrupt basic services and the local economy. Recent ransomware attacks on Colonial Pipeline in the U.S., Vestas in Denmark and Electrobras in Brazil disrupted energy supply chains and forced a degradation of service throughout the regions. In each of these cases, malicious actors breached an end device and laid low for weeks or months while slowly and deliberately probing the network in search of a tempting target. Once the attackers got the lay of the land, they seized control over critical assets, took them offline and held them for ransom.

The problem is that utilities and the energy industry as a whole has become more interconnected than ever. Equipment manufacturers require connectivity to monitor the health and performance of their deployed assets, and utility operators need to remotely manage assets in the field to oversee load and ensure energy quality. As the energy sector becomes more decentralized and interconnected, it opens the door to opportunities for cybercriminals.

How will the energy industry’s cybersecurity teams join together?

Improving cybersecurity throughout the energy sector while protecting electrical grids around the world will require industry-wide collaboration and information sharing about the identification and remediation of cybersecurity incidents. In fact, energy security leaders can look to other industries — like the airline and nuclear power industries — for best practices on information sharing and collaboration. Leaders in those industries have put aside their competitive, regulatory and political differences to prioritize public safety. The energy sector can too.

Here are three steps for improving collaboration across the energy industry to better protect the world’s electrical grids from cyberattacks:

1. Foster a collaborative culture

Utilities need to know where they are vulnerable and where gaps exist in their security strategy. They then need to get away from the blame-first, react-second culture. Security teams need people to feel comfortable alerting their colleagues about mistakes or vulnerabilities without fear of blame or shame. Instead, organizations should reward people who step forward and celebrate the cybersecurity successes the industry achieves.

2. Build an intelligence network with sensors and people

Energy security leaders then need to build a network that automates monitoring and alerting and combine it with human intelligence. Fortunately, asset management and remote monitoring solutions for the electrical grid already exist. Organizations need to free up budget to get these capabilities into the field where they can report on vulnerabilities and security gaps.

3. Be open to the open exchange of information

It’s imperative that security teams establish a level of transparency within the energy and utilities industries and openly share information about the identification, remediation and prevention of ongoing cyberattacks. However, the protection of assets and users requires a balancing act. Users require the understanding that their data is protected by the company that has been granted access. However, it is possible to share information and intelligence across the industry while retaining data privacy on a company by company basis. Finding this balance will be key to securing the energy and utility industries and the confidence of their users.

Lessons learned from other industries

Fortunately, oil and gas organizations have the nuclear energy and airline industries as models for this type of collaborative action. Air traffic controllers are largely protected under the law as long as they are open and transparent about what went wrong prior to an accident. They feel comfortable working with investigators because they are shielded and have a vested interest in protecting public safety. Same with the nuclear power industry. Operators routinely share information about their plants to create a series of best practices that can be applied globally. Again, public safety takes precedence because there is a collaborative effort to share information freely.

Fortunately, several global regions have implemented initial efforts for information sharing within the energy industry. Very often these efforts are government-led and restricted to specific country perimeters. Could the industry go further?

Energy leaders have started laying the groundwork for collaboration in the energy industry on a more global base. A committee of industry leaders has been set up through the World Economic Forum to study information sharing for cybersecurity purposes, which meets regularly to discuss trends and remediation strategies.

Energy security leaders are working and operating in an increasingly complex energy environment. As the sector grows, so do the threats against it. Responding to these proactively and as one ecosystem will be critical to increase the sector’s resilience against these threats. However, this requires the thoughtful, methodical implementation of information-sharing programs and a far out lens that looks at the system as a whole, rather than on a case by case basis.

This industry wide collaboration is necessary to advance the world’s energy system and make it more sustainable, flexible and secure. We need to start working more closely together today.

KEYWORDS: collaboration cyber security leadership energy sector security information sharing oil and gas security public private partnerships

Share This Story

Looking for a reprint of this article?
From high-res PDFs to custom plaques, order your copy today!

Pierre-Alain Graf is the Senior Vice President of Global Security Business at Hitachi Energy and a Co-Chair of the World Economic Forum's Workgroup on Cyber Resilience.

Recommended Content

JOIN TODAY
To unlock your recommendations.

Already have an account? Sign In

  • Security's Top Cybersecurity Leaders 2024

    Security's Top Cybersecurity Leaders 2024

    Security magazine's Top Cybersecurity Leaders 2024 award...
    Top Cybersecurity Leaders
    By: Security Staff
  • cyber brain

    The intersection of cybersecurity and artificial intelligence

    Artificial intelligence (AI) is a valuable cybersecurity...
    Cybersecurity
    By: Pam Nigro
  • artificial intelligence AI graphic

    Assessing the pros and cons of AI for cybersecurity

    Artificial intelligence (AI) has significant implications...
    New Security Technology
    By: Charles Denyer
Manage My Account
  • Security eNewsletter & Other eNews Alerts
  • eMagazine Subscriptions
  • Manage My Preferences
  • Online Registration
  • Mobile App
  • Subscription Customer Service

More Videos

Sponsored Content

Sponsored Content is a special paid section where industry companies provide high quality, objective, non-commercial content around topics of interest to the Security audience. All Sponsored Content is supplied by the advertising company and any opinions expressed in this article are those of the author and not necessarily reflect the views of Security or its parent company, BNP Media. Interested in participating in our Sponsored Content section? Contact your local rep!

close
  • Crisis Response Team
    Sponsored byEverbridge

    Automate or Fall Behind – Crisis Response at the Speed of Risk

  • Perimeter security
    Sponsored byAMAROK

    Why Property Security is the New Competitive Advantage

  • Duty of Care
    Sponsored byAMAROK

    Integrating Technology and Physical Security to Advance Duty of Care

Popular Stories

Internal computer parts

Critical Software Vulnerabilities Rose 37% in 2024

Coding

AI Emerges as the Top Concern for Security Leaders

Half open laptop

“Luigi Was Right”: A Look at the Website Sharing Data on More Than 1,000 Executives

Person working on laptop

Governance in the Age of Citizen Developers and AI

Shopping mall

Victoria’s Secret Security Incident Shuts Down Website

2025 Security Benchmark banner

Events

June 24, 2025

Inside a Modern GSOC: How Anthropic Benchmarks Risk Detection Tools for Speed and Accuracy

For today's security teams, making informed decisions in the first moments of a crisis is critical.

August 27, 2025

Risk Mitigation as a Competitive Edge

In today’s volatile environment, a robust risk management strategy isn’t just a requirement—it’s a foundation for organizational resilience. From cyber threats to climate disruptions, the ability to anticipate, withstand, and adapt to disruption is becoming a hallmark of industry leaders.

View All Submit An Event

Products

Security Culture: A How-to Guide for Improving Security Culture and Dealing with People Risk in Your Organisation

Security Culture: A How-to Guide for Improving Security Culture and Dealing with People Risk in Your Organisation

See More Products

Related Articles

  • Cybersecurity-lock.jpg

    Report: Collaboration is key to security optimization

    See More
  • power grid security

    3 key cybersecurity trends in the energy sector

    See More
  • e-tower1-900px.jpg

    Energy Sector is a 'Prime Target' for Cyberattacks

    See More
×

Sign-up to receive top management & result-driven techniques in the industry.

Join over 20,000+ industry leaders who receive our premium content.

SIGN UP TODAY!
  • RESOURCES
    • Advertise
    • Contact Us
    • Store
    • Want More
  • SIGN UP TODAY
    • Create Account
    • eMagazine
    • eNewsletter
    • Customer Service
    • Manage Preferences
  • SERVICES
    • Marketing Services
    • Reprints
    • Market Research
    • List Rental
    • Survey/Respondent Access
  • STAY CONNECTED
    • LinkedIn
    • Facebook
    • YouTube
    • X (Twitter)
  • PRIVACY
    • PRIVACY POLICY
    • TERMS & CONDITIONS
    • DO NOT SELL MY PERSONAL INFORMATION
    • PRIVACY REQUEST
    • ACCESSIBILITY

Copyright ©2025. All Rights Reserved BNP Media.

Design, CMS, Hosting & Web Development :: ePublishing