Other cookies are configurable.
Energy
Electricity, gas and heat providers anchor every other sector's continuity, and now carry explicit reporting and resilience duties on both sides of the Swiss border.
The threat profile we plan against
- Grid and OT exposure. Operational technology where a cyber incident becomes a physical one, and recovery windows are set by physics.
- Explicit regulation. Energy is a named critical infrastructure sector under the Swiss ISG reporting duty and a headline sector under NIS2.
- Market volatility. Supply disruptions and price shocks that stress hedging, liquidity and crisis communications simultaneously.
- Interdependency. Telecoms, IT and logistics dependencies that most energy continuity plans still understate.
The regulatory drivers
Energy operators are named critical infrastructure under the Swiss ISG, with the 24 hour reporting duty to BACS in force since April 2025, and among the most heavily obligated sectors under NIS2 in the EU, covering risk management, incident handling and board accountability.
Consulting
Business impact analysis, continuity and crisis frameworks, and certification readiness against ISO 22301 and ISO 27001, built for this sector's realities.
See consulting ›Training and exercising
Leadership crisis exercises and accredited training that turn plans into rehearsed behaviour, including Operation HELVETIA.
See training ›Resilience Arena
Our platform for living plans, in-platform simulations and audit-ready compliance evidence across sites and teams.
See the platform ›See how this works in practice in our case studies, or start from the wider discipline on our business continuity management page.
Do you cover OT as well as IT continuity?
Yes. Our impact analysis and exercising cover operational technology, control rooms and field operations together with corporate IT, because real incidents refuse to respect that boundary.
What does the ISG reporting duty mean for us in practice?
Detection, escalation, decision authority and the BACS reporting channel must work inside 24 hours, around the clock. We build and exercise that pathway with your teams. See our German page on the Informationssicherheitsgesetz.
Can you run joint exercises with our major suppliers?
Yes, and for energy we recommend it: supplier and interdependency exercises expose the assumptions that single company exercises never test.
Resilience built for energy.
A confidential conversation with a senior practitioner who knows the sector. We respond within 24 hours. No obligation.
Book a consultation