Cybersecurity Asset Inventory and Risk Management Support for NEPCO

VIS is assisting the World Bank in strengthening the cybersecurity preparedness of Jordan’s National Electric Power Company (NEPCO). The assignment focuses on helping NEPCO establish a structured approach to cybersecurity governance, asset management, and risk mitigation, ensuring that both its information technology (IT) and operational technology (OT) systems are protected against emerging threats. As part of the study, VIS supports NEPCO in developing a comprehensive IT and OT asset inventory (Configuration Management Database – CMDB), identifying and quantifying cybersecurity risks across critical processes and infrastructure, and preparing a detailed Risk Assessment Report to guide ongoing remediation actions. The project also includes the design of a cybersecurity training program tailored to NEPCO’s operational context, ensuring that staff at all levels are equipped with the knowledge and tools required to implement the company’s cybersecurity policy. The work provides a foundation for a more resilient and secure power system in Jordan, aligned with international best practices.