All utilities organisations surveyed in the latest EY Power and Utilities Global Information Security Survey 2017-18 (GISS) have indicated that their cybersecurity function does not meet their needs. This is despite the fact that utilities are particularly attractive targets, such as for highly sophisticated state-sponsored actors in politically unstable regions looking to gain a political or monetary advantage.