The American Public Power Association is proud to present the all new Cybersecurity Scorecard, powered by Axio360. This robust platform is the result of a federally-funded cybersecurity improvement initiative that will be openly accessible to all Association members.

Due to the recent surge of cyber threats in the energy sector, understanding and improving our collective cybersecurity posture is increasingly important.

Through our new #CyberReady engagement initiative, the Association will provide members with the necessary tools for preparation and success in managing their cyber risk. The online Cybersecurity Scorecard platform measures any utility’s current state and help prioritize security investments, as well as provide informative and tailored cybersecurity training. Together, we commit to being #CyberReady.

What is the Cybersecurity Scorecard? The Cybersecurity Scorecard is a customized cyber risk platform that will empower utilities to not only assess their current security posture, but plan and track improvements. Developed by industry experts, this content-rich tool is tailored specifically for public power. It allows utilities to conduct a simple self-assessment of their cybersecurity program capabilities in one hour or less. As the size and program goals of each utility differ, managers have the option of advancing to other, more advanced stages, or remaining in their current cycle. As such, each tier of the Cybersecurity Scorecard is capable of being a fully sustainable program.

ARE YOU #CyberReady?

Your Free Access to becoming #CyberReady

The Association performs regular outreach initiatives to promote participation in the #CyberReady program. We encourage all members to register at scorecard.axio.com to gain immediate access to the online Cybersecurity Scorecard Platform, powered by Axio360.

More #CyberReady outreach efforts will be conducted, including:THE MEMBER USER GROUP

Association members are encouraged to volunteer as a member of the Cybersecuri-ty Scorecard user group. By joining, you can help our team desin new content and features for future iterations of the online Cybersecurity Scorecard platform, shaping this important national program.

REGIONAL ROADSHOWS

Our team is hitting the road to host several half-day workshops across the country to demonstrate the new platform. Cybersecurity experts will be present during the workshops to discuss the current threat landscape, interpret assessment results, and answer any questions members may have about their Cybersecurity Score-card recommendations. All Association members are encouraged to attend.

LEVEL 03ADVANCED

ALL ACCESS

LEVEL 01FUNDAMENTAL

CYBERSECURITYSCORECARD

CYBERSECURITYTARGET PROFILE

LEVEL 02INTERMEDIATE

Review a comprehensive report based on the self-assessment to find out where your utility is performing well and what foundational steps you want to take to sustain or strengthen your cybersecurity program.

REPORTING

Re-take the self-assessment to either start the process again, or move along to the next level.

WHAT’S NEXT?

Create a cybersecurity action plan based on the recommendations from the report.

ACTION PLAN

Take the most advanced self- assessment, the Cybersecurity Capability Maturity Model.

ADVANCED ASSESSMENT

Complete an easy self-assessment of your cybersecurity capabilities in one hour or less.

ASSESSMENT

Receive a customized target profile from public power experts.

TARGET PROFILE

Follow an industry-vetted roadmap for making security improvements.

ROADMAP

Create an individualized target profile and make cybersecurity decisions on your own.

TAKE THE WHEEL

Regularly re-assess your cyberse-curity program to stay up-to-date on best practices.

EVALUATION

Get a third-party assessment of your utility’s more advanced cybersecurity capabilities and posture.

IN-DEPTH ANALYSIS

ONLINE PORTAL FEATURES

CYBERSECURITY SCORECARD

Take notes for each practice within the platform.

Assign tasks to individuals with deadlines.

Help text in each section including definitions and concepts.

User dashboard showcasing each assessment and various statistics in real time.

Ability to do multiple internal assessments and benchmarking.

Improvement toolkit including document templates, policies and example policies.

Suggestions for cybersecurity training.

Regional workshops to provide additional help and guidance.

Ability to tie to other association projects, such as technology deployments and vulnerability assessments.

Each level is capable of being a fully sustainable cybersecurity program and can be reassessed on a regular basis to track improvements.

Expert coaching.