The continuous increase of digital connectivity in the electricity sector increases exposure to potential cyber risks, in particular for global industrial companies operating in complex environments such as the Enel Group. To keep pace and better monitor cyber risks, the Enel Group embedded cybersecurity strategy into its corporate group strategy, developing a cybersecurity framework that encompasses eight processes (as depicted in the figure below). It is easy to observe the full match with the World Economic Forum’s Advancing Cyber Resilience: Principles and Tools for Boards. World Economic Forum’s cybersecurity electricity industry principles and Enel’s cybersecurity framework processes In its journey to cyber resilience, and in order to improve its oversight of enterprise cyber risk, Enel established its Cyber Security Risk Committee. Enel’s chief executive officer acts as chairperson, with the aim of addressing and approving the organization’s cybersecurity strategy as well as checking periodically on the progress of its implementation. This committee comprises key executive directors overseeing Enel’s critical businesses and services from different geographies along with the group Chief Information Officer and Chief Information Security Officer. In addition, Enel, within its cybersecurity cross-organization, defined the new “cyber-risk manager” organizational role – for each area of business – reporting to the Chief Information Security Officer and representing business priorities related to cyber-risk management. This governance allowed the extension and adoption of a group-wide, risk-based cybersecurity framework to all business areas and geographical locations, improving the control of the Enel Group’s cyber resilience. The expansion of a holistic cyber-risk management approach represents an ongoing priority at Enel to encourage ecosystem cyber maturity by employing and collaborating with external parties. Currently Enel is strongly engaged in the community working group developing a cyber security Network Code for the electricity ecosystem in Europe.