Cyber-attack crisis management in the context of energy companies

¹ Industrial Technologies and Services Laboratory, Higher School Of Technology, Fez, Morocco
² University of Poitiers, France - Ibn Tofail University, Morocco

Abstract

The aim of this research is to present and analyze a set of public or private energy companies that have been victims of cyber-attacks, while identifying various lessons that can guide other companies towards effective crisis management in response to this risk. To achieve this, we have adopted an exploratory approach that involves utilizing, in an original manner, the raw material derived from a collection of published articles and other documents that have addressed and presented the phenomenon of cyber-attacks on private and public energy companies. The main findings of this study demonstrate that, for effective management of a cyber-attack crisis, legislation must serve as a catalyst for anticipating and managing the crisis through innovative and ambitious draft texts. Additionally, companies must possess the necessary skills and expertise to respond to cyberattack crises, including the technical infrastructure and software required to counter cyber incidents. Furthermore, fostering a collaborative and multi-disciplinary team-building capacity led by a pilot with a comprehensive and unified vision, along with the ability to make prompt decisions, is of paramount importance.