⚡ Energy & Utilities
Energy and utility companies operate Critical National Infrastructure (CNI) where IT failures can have physical consequences — power cuts affecting hospitals, water supply interruptions, or gas pipeline safety systems going offline. The OT/IT convergence is the defining challenge: SCADA systems, PLCs, and IoT sensors that were historically air-gapped are now connected, creating new incident and security management requirements. NIS2 (EU) and equivalent regulations mandate documented resilience programmes.
Service Architecture
ITIL Implementation Journey
Energy & Utilities ITIL 4 Roadmap
Click any step to expand · 6 steps
Key Use Cases
1. OT/IT Incident Bridge
The most critical integration in energy ITSM — connecting operational technology alarms to IT service management:
SCADA Alarm: Substation PST-042 — transformer temperature HIGH
→ OT Monitoring (Claroty/Nozomi) → anomaly detected
→ Correlation: 3 related alarms in 5 min → likely thermal event
→ Auto-create ITSM Major Incident (CNI classification)
→ Priority: P1 — CNI Essential Service
→ Notifications: Control Centre, Field Operations, CISO, NOC
→ NIS2 clock starts: 24h to initial regulatory notification
If SCADA connection lost:
→ Immediate P1 — Loss of visibility = safety risk
→ Emergency Change authorised for network restoration
→ DR control centre activated if primary unavailable2. NIS2 Compliance Reporting
| Requirement | ITSM Implementation | Deadline |
|---|---|---|
| Initial incident notification | Auto-generated from P1 template | 24 hours |
| Detailed incident report | PIR data + CMDB evidence | 72 hours |
| Risk management measures | Risk Register in ITSM/GRC | Ongoing |
| Supply chain security | Vendor ITSM tickets + audit log | Annual |
| Business continuity tests | DR test reports in ITSM | Annual |
| Vulnerability management | Patch compliance report | Monthly |
3. BCP for Essential Services
| Service | Maximum Tolerable Downtime | RTO | Strategy |
|---|---|---|---|
| SCADA / Grid Control | 0 minutes (safety-critical) | Seconds | Active-Active redundant |
| Smart Meter Platform | 4 hours | < 2 hours | Hot standby |
| Customer Billing | 24 hours | < 8 hours | Warm standby |
| Corporate IT | 72 hours | < 24 hours | Cold standby |
4. Field ITAM — OT Asset Lifecycle
Energy companies own extensive field assets with lifecycle management requirements:
OT Asset Lifecycle:
Planned → Procured → Installed → Commissioned
→ In Service (CMDB updated, monitoring active)
→ Maintenance (scheduled work order → change request)
→ End of Life (EOL date tracked → refresh planned)
→ Decommissioned (CMDB retired, disposal documented)
Key OT ITAM metrics:
- % of OT assets with documented EOL dates
- % of assets within supported firmware version
- Mean time between unplanned maintenance events
- CapEx refresh spend vs planned budget5. Change Management on OT Systems
OT change management is fundamentally different from IT:
| Change Type | OT Specifics | Approval Required |
|---|---|---|
| Firmware update (PLC) | Requires plant shutdown window | Control Centre Director + CISO |
| SCADA configuration | Full rollback plan mandatory | OT Engineer + Change Manager |
| Network segmentation | Air-gap validation required | CISO + Network Architect |
| New IoT device | Security assessment before connection | CISO |
| Standard IT change | Normal CAB process | Change Manager |
CapEx vs OpEx
| Category | CapEx | OpEx | Note |
|---|---|---|---|
| SCADA / Control Systems | ✅ Major | — | 10–20 year lifecycle |
| OT Cybersecurity (Claroty/Nozomi) | — | ✅ SaaS | Shifting to OpEx |
| ITSM Platform | — | ✅ SaaS | Cloud preferred |
| DR Control Centre | ✅ Build | — | National asset |
| Smart Meter Infrastructure | ✅ CapEx programme | — | Regulated asset base |
| OT Asset Refresh | ✅ 5-year CapEx plans | — | Regulated by OFGEM/CRSE |
Tool Selection Guide
| Context | Platform | Reason |
|---|---|---|
| Large utility (national grid) | ServiceNow + OT integrations | CMDB depth, GRC for NIS2, AIOps |
| Regional energy company | BMC Helix + TrueSight | OT/IT integration, CMDB, cost-effective |
| Oil & Gas (upstream) | SMAX + Maximo | IBM Maximo integration for OT assets |
| Renewable energy operator | Freshservice + custom | Modern UX, cost-efficient, simple OT |
← Back to Industries Overview · Template Library