Thank you for Subscribing to CIO Applications Weekly Brief
A featured contribution from Leadership Perspectives, a curated forum for enterprise technology leaders, nominated by our subscribers and vetted by the CIOApplications Editorial Board.

EDP - Energias de Portugal
Paulo Moniz, Director of Information Security and IT Risk
Building Cyber Resilience in a Fragmented Energy Landscape


With a distinguished career in cybersecurity and a leadership role at one of the world’s largest energy providers, Paulo Moniz offers a rare and insightful perspective on the evolving threat landscape in the global energy sector. In this exclusive feature, he discusses the complex challenges of securing critical infrastructure across diverse geographies, the growing need for global standardization, and the focused mindset driving cybersecurity strategies in an increasingly interconnected world.
Navigating Global Threats and Regulations
The energy sector faces several pain points, and it’s difficult to prioritize one over another. One major challenge is that we are using more and more technology in all parts of the energy value chain. IoT, in particular, is a challenge for us to deal with because we need to protect new ways of creating or managing energy.
Another significant challenge is complying with the many regulations and compliance requirements worldwide, which can often conflict with one another. This makes it difficult to create synergies and normalize standardized processes across different regions. The supply chain presents its own difficulties as well. Beyond energy products, it involves development processes, BPOs and other complex, intertwined supply chains that are challenging to manage and secure.
Equally challenging is the task of measuring and communicating the real cybersecurity risk in such a large global organization. Differences in geopolitical context, exposure and threats across regions make it hard to clearly show the cybersecurity posture to top management. Without that clarity, justifying the necessary investments in cybersecurity becomes a significant challenge.
To address these complexities, my focus has always been on creating synergies, global processes and global technologies. It is not feasible to assess vulnerabilities differently across regions, nor we can operate with so many different tools present in various locations, otherwise I will spend my time trying to overcome operational problems and not addressing the real risk. So the primary objective is to establish a unified, global perspective by working as one cohesive team, uplifting standardized technologies, processes and methodologies to effectively manage risks and vulnerabilities. This unified approach is fundamental to how we operate.
The Transformative Impact of Artificial Intelligence
In the coming future, the technology that will most significantly shape the future of the energy sector is artificial intelligence (AI). Although AI itself isn’t new, the recent advancements have marked a significant leap in how operations should function. AI will influence everything from front-line operations to back-office processes. However, it’s crucial to first understand the problems at hand before applying the technology. AI promises to address many of these challenges and represents a major step forward. In cybersecurity, since attackers also employ AI, we must use it proactively to defend our organization. AI is the most impactful technology shaping our industry today.
Focus on What Truly Matters
In a world with so many emerging technologies and constant streams of information articles, conferences and new challenges, it’s easy to get distracted, so my advice to peers is simple: focus. In today’s fast-paced world, it’s crucial to identify your real problems and dedicate your efforts in solving them. Jumping from one project or technology to another can lead to lost value and even increased risk. Instead, use technology purposefully to address what truly matters and maintain a clear, focused approach.

