Cyber Security Program Investment Brief

This document is an IT investment brief focused on the Cyber Security Program of Jemena Electricity Networks (Vic) Ltd. It outlines the objective of deploying capabilities that align with technological advancements to provide effective protection against cyber security threats. The brief emphasizes the importance of maintaining existing services while complying with regulatory obligations. It highlights the increasing prominence of cyber security risks, particularly in the utility sector, where reported incidents have surged significantly. The document details Jemena's risk-based approach to managing cyber threats, utilizing frameworks such as the NIST Cyber Security Framework and the Australian Energy Sector Cyber Security Framework. Additionally, it presents various cyber security controls implemented by Jemena, including user awareness programs, managed detection and response services, and vulnerability management practices. The brief also discusses customer engagement initiatives aimed at preparing for a sustainable energy future while addressing affordability, reliability, and education on energy transition.