Electric Power Research Institute About Us
The Institute
Office Locations

2016 Corporate Social Responsibility Report

EPRI completed a full corporate social responsibility assessment in 2015 culminating in release of its first Corporate Social Responsibility report. The report (and companion video) provides a comprehensive look at EPRI's social responsibility culture and actions around four focus areas: community, employees, operations, and research.

Our Work Events Newsroom Careers EPRI Journal

Product Abstract

Creating Security Metrics for the Electric Sector

Product ID:3002005947
Date Published:31-Dec-2015
Sector Name:Power Delivery & Utilization - Distribution & Utilization
Document Type:Technical Results
Price:No Charge

This Product is publicly available

View Executive Summary      660.76 KB - Adobe PDF (.pdf)


The nation’s power system is a complex machine, consisting of both legacy and next-generation technologies. Daily reliable operation of the power grid relies on intelligent components that communicate with advanced capabilities. Cyber security focuses on the ability to protect these unique systems and devices from being disrupted, disabled, destroyed, or maliciously controlled—including destroying, stealing, or compromising the availability and integrity of data. Although the electricity sector has matured in the protection of critical systems and devices, many security practitioners struggle with quantifying cyber security program improvements.

To better protect the nation’s power grid, many utilities are investigating methods of communicating their security posture across the organization, as well as to outside parties. This has led to several discussions regarding measuring security in a consistent way. Building on previous efforts, the electricity industry leverages various security metrics and is constantly maturing in this relatively new field.

This report provides guidance to utilities on developing and implementing a security metrics program, leveraging existing best practices. The guidance is intended to complement existing security and compliance programs.


2015 Program 183   Cyber Security and Privacy
  • Cyber security
  • Cyber security risk management
  • Cyber security metrics
  • Information assurance

For further information about EPRI, call the EPRI Customer Assistance Center at (800) 313-3774 or email askepri@epri.com

 Having Trouble Downloading?

Internet Explorer Information Bar

If using Internet Explorer the browser automatically blocks downloads by default, instead displaying an "Information Bar" at the top or bottom of the page.

Click "Download File" on Information Bar if using Internet Explorer 8 or older. If using version 9, click “Save” button on Information Bar and then select “Open” once downloaded.

Pop-up blocker software

You can hold down the CTRL key when selecting Download to bypass your pop-up blocker.

You may also configure your pop-up blocker to allow EPRI.com to open new windows.

Recommended Software

EPRI recommends using the latest version of Adobe Reader for best performance.

 Support Services

EPRI Customer Assistance Center (CAC):
800-313-3774 or 650-855-2121 Option 4

Hours of Operation:
8:00 AM - 6:00 PM Eastern Time (GMT-5)

Order and Conference Center:
800-313-3774 or 650-855-2121 Option 2