Book a consultation
Information security & privacy / Guidance standard

ISO/IEC 27019: Information security for the energy utility industry

Sector controls for process control systems in electricity, gas and heat utilities.

Talk to a consultant Start with a gap assessment

ISO/IEC 27019 extends ISO 27002 with controls for process control systems used in energy utilities. It is often applied with ISO 27001 by utilities and in regulatory schemes for critical energy infrastructure. We combine it with IEC 62443 for OT.

Who it is for

  • Power, gas and district heating utilities

What you gain

  • Energy-specific controls inside your ISMS

How we help you apply it

  1. Maturity review

    Assess current practice against the guidance and agree what good looks like for your organisation.

  2. Framework design

    Translate the principles into a practical framework, roles and tools that fit your existing management systems.

  3. Embedding

    Workshops and coaching so teams apply the framework in day-to-day decisions.

  4. Review and reporting

    Periodic reviews and reporting that show progress to leadership and stakeholders.

ISO/IEC 27019 questions

Do utilities certify to ISO 27019?
Utilities certify to ISO 27001 with ISO 27019 controls included in the scope and Statement of Applicability.

Ready to start on ISO/IEC 27019?

Tell us which standard or customer requirement you are facing. In a free 30-minute call we will outline the gaps, a realistic timeline and what it will take to be audit-ready.

Book a free consultation Try the standard finder