The study also focuses on the people, process and technologies deployed by utilities and energy companies to maintain a high level of vigilance. A total of 291 IT and IT security practitioners in utilities and energy companies with an average of 11 years of experience participated in this study. The work of participants in our study involves securing the organization’s information assets, enterprise systems or critical infrastructure.