Cybersecurity Readiness and Action Plan for Jordan’s National Electric Power Company (NEPCO)

VIS supported the World Bank in assessing and strengthening the cybersecurity readiness of Jordan’s National Electric Power Company (NEPCO). The study aimed to evaluate NEPCO’s current cybersecurity maturity, identify gaps against international best practices, and develop a staged action plan to guide the company’s transition toward enhanced resilience in both IT and operational technology (OT) systems. Building on the findings of the 2021 Study on Smart Grid Options in Jordan, VIS conducted an updated gap analysis through targeted interviews and workshops with relevant stakeholders. The analysis covered institutional frameworks, technical systems, capacity, and alignment with national cybersecurity strategies. Based on this assessment, VIS developed a comprehensive Cybersecurity Action Plan outlining institutional reforms, the adoption of cybersecurity standards such as ISO/IEC 27001, the establishment of a dedicated CISO function, and necessary OT/IT investments. The plan included detailed cost estimates, implementation milestones, and performance indicators to enable the World Bank to monitor progress and link the release of funds to measurable results. This work provides NEPCO and Jordan’s energy sector with a structured roadmap for achieving higher levels of cybersecurity maturity and operational resilience.