# ISO/IEC 27019: Information security for the energy utility industry

> Sector controls for process control systems in electricity, gas and heat utilities.

URL: https://securei3.com/standards/iso-27019/
Category: Information security & privacy: Guidance standard
Provider: Secure iQube (independent consultancy; ISO certificates are issued by accredited certification bodies; SOC and ISAE reports by licensed CPA and audit firms, which Secure iQube can arrange through partner firms)


ISO/IEC 27019 extends ISO 27002 with controls for process control systems used in energy utilities. It is often applied with ISO 27001 by utilities and in regulatory schemes for critical energy infrastructure. We combine it with IEC 62443 for OT.

## Who it is for

- Power, gas and district heating utilities

## Benefits

- Energy-specific controls inside your ISMS

## How Secure iQube helps

1. **Maturity review**: Assess current practice against the guidance and agree what good looks like for your organisation.
2. **Framework design**: Translate the principles into a practical framework, roles and tools that fit your existing management systems.
3. **Embedding**: Workshops and coaching so teams apply the framework in day-to-day decisions.
4. **Review and reporting**: Periodic reviews and reporting that show progress to leadership and stakeholders.

## Frequently asked questions

### Do utilities certify to ISO 27019?

Utilities certify to ISO 27001 with ISO 27019 controls included in the scope and Statement of Applicability.

Related: https://securei3.com/standards/iso-27001/, https://securei3.com/standards/iec-62443/, https://securei3.com/standards/cea-power-cyber/

Contact: https://securei3.com/contact/: info@securei3.com