The era of digitization and technological innovation means that organizations are exposed to cyberattacks that are increasingly frequent and sophisticated. The organizational complexity of the Enel Group and the numerous environments it encompasses (data, people and the industrial world) expose the organization’s assets to a wide range of cyber-attacks. To address this, the Enel Group has adopted a cyber risk management model based on a "systemic" vision that integrates the traditional information technology sector, the operational technology field most closely linked to the industrial sector and IoT associated with the networking of smart objects. In particular, Enel has adopted a “Cyber Security Framework," a policy issued by the CEO, defining all processes in order to guide and manage cybersecurity activities. This framework facilitates deep involvement from all business areas, the implementation of regulatory and legal requirements, Case study from ENEL: An example of what can be done they also often have different security requirements. Perhaps the most fundamental difference is that IT security focuses on confidentiality while OT usually prioritizes integrity and availability. The potential societal consequences require a grid asset operator’s priority to be ensuring the safe and reliable delivery of electricity. This responsibility leads to other differences across areas, from component lifetimes and patching practices to audit timelines and additional functions. The security challenges created by differences in priorities are often exacerbated by a communication barrier between IT and OT groups. Additionally, they may have different reporting and governance structures. This lack of coordination and communication is especially risky in times of emergency where the organization needs to respond to, or recover from, a cyber incident. the use of best-available technologies and an informed workforce. Furthermore, cybersecurity decisions and activities are based on business priorities, and security measures are embedded throughout the design and development lifecycle of applications, processes, and services. This model is supported by a global and holistic organizational structure that drives activities and projects based on a risk-based approach in order to balance the benefits of increasingly digital IT/OT/IoT systems with the potential cyber risk and associated business impact. However, Enel Group has not stopped there. In 2017, Enel Group established a new Cyber Security Risk Management Methodology, applicable to all IT, OT and IoT environments and has created its own active Cyber Emergency Readiness Team (CERT), which is recognized and accredited by national and international communities, in order to direct an industrialized response to cyber threats and incidents.