The Enel Group WEC Italia - 3a Conferenza Nazionale Cyber Security Energia 25 Oct 2016 – Roma

Yuri Rassega

Head of Cyber Security (CISO) Global ICT

Dati operativi1

Principali indicatori Enel e peers Europei2

2

Leadership nei vari segmenti della catena del valore

Infrastrutture e Reti 61,2 mn utenti finali 38,5 mn contatori intelligenti 1,9 mn km reti

Mercato 56 mn clienti elettricità 5 mn clienti gas

Generazione da Rinnovabili 37,0 GW capacità installata

Generazione da Termoelettrica 52,7 GW capacità installata

Clienti (mn)

Capacità installata (GW)

Lunghezza reti (mn km)

22 24

34 32

38 61

45 49

47 70

90 136

- 0,4

1,1 1,1

1.35 1,9

1. Dati al 31/12/2015 | 2. Dati al 31/12/2015 3. Dati riferiti al perimetro Europa (Gdf Suez/Engie non fa disclosure sul numero totale di clienti) I 4 Il numero di clienti include anche i clienti mondiali sul mercato libero pari a 22,8 mn; 5. Esclude105(‘000) km di rete di trasmissione di RTE

3

4

Portfolio breakdown1

3

14%

30%

15%

10%

23%

8%

284 TWh/year

Nuclear Coal CCGT Oil + Gas Hydro Other Renewables

Production mix1

6%

19%

18%

14%

33%

10%

87 GW

Nuclear Coal CCGT Oil + Gas Hydro Other Renewables

Installed capacity2 Distributed energy1 Customers (power + gas)2

1.  Data as of 31st December 2015 2. Data as of 30th June 2016 3, Eastern Europe includes Russia, Slovakia, Romania, France, Belgium, Bulgaria, Greece

56%

24%

4%

16%

417.4 TWh/year

Italy

Iberia

Eastern Europe

Latin America

50%

21%

4%

25%

61.2 mn

Italy

Iberia

Eastern Europe

Latin America

3 3

Enel’s organisation

4

Simple and effective organization

Group CEO

Global Procurement

Holding functions

Italy

Iberia

Europe - North Africa

Sub-Saharan Africa - Asia

Global ICT

Global Infrastructure and Networks

Global Thermal Generation

Global Renewable Energies

Global Trading and Upstream Gas

•  Best Practice sharing

•  Efficiency in capex and opex

•  Capital allocation

•  EBITDA

•  Clients •  Local Stakeholders •  Regulatory Affairs

•  Revenues •  Cash-flow

•  EBITDA

Global Business Lines

Geo

grap

hies

•  Administration, Finance and Control •  Human Resources and Organisation •  Communications •  Legal and Corporate Affairs •  Innovation and Sustainability •  European Affairs •  Audit

North and Central America

Latin America

Enel today1

Global diversified operator

5 1.  As of 30th June 2016 2.  Presence with operating assets

= Enel presence 2

Enel Group • Capacity: 87 GW • Networks: 1.9 mn km • End users: 61.5 mn • Free customers: 23.1 mn

North and Central America • Capacity: 3.5 GW

Latin America • Capacity: 18.6 GW • Networks: 0.32 mn km • End users: 15.3 mn

Iberia • Capacity: 22.8 GW • Networks: 0.32 mn km • End users: 11.9 mn • Free customers: 12.5 mn

Europe and North Africa • Capacity: 14 GW • Networks: 0.09 mn km • End users: 2.7 mn • Free customers: 0.1 mn

Italy • Capacity: 27.8 GW • Networks: 1.14 mn km • End users: 31.6 mn • Free customers: 10.5 mn

Sub-Saharan Africa - Asia • Capacity: 0.3 GW

Enel key Digitalization areas of opportunities

6 Employees

Asset

Customers

•  Asset digitalization opportunities leveraging Big Data and IoT: –  Digital power plants –  Smart grids –  Smart cities

•  Customer journey and services digitalization leveraging Big Data and IoT: –  Engagement Platform –  Customer analytics –  New services (Smart Home, e-mobility, connected devices, …)

•  Enterprise digitalization: –  Organization –  People –  Workplace

How to Manage Cyber Security

7

Organizational Complexity

Geographical Extension

Multi- language environment

Mobile Security Cloud Security

Industrial Control System

Smart Grid

Big Data

@

Internet of Things Information Technology

Operational Technology

Implementing Cybersecurity through a group-wide integrated model and organization, including both IT and OT (industrial)

BUSINESS LINES SOLUTION CENTERS

(IT & OT development)

Enel Cyber Security new organization

• Cyber security solutions and services for monitoring and respond management;

• Group's CERT management carrying out related investigations, coordinating the decision process, ensuring the communication with stakeholders;

•  Industry trends monitoring related to new technologies on detection and respond;

•  Identity Management & Access Control process.

• Security by design protection model management;

• Establish, according to the Cyber security program and plan, a continuous improvement of the resilience to cyber-threats in every stage of the lifecycle of the IT, OT solutions in all group’s industries, and emerging technology assets such as IoT devices;

• Technical documentation, procedures, instructions developing and configuring guidelines and processes;

• Cross-business and cross-geography integrated vision of the security solution;

• Best practices global convergence and adoption.

Cyber Security Strategy, Assurance

and Reporting

Cyber Security Risk Monitoring and

Respond

Information Systems Cyber Security Engineering

Operational Technology Cyber

Security Engineering

Main

Resp

onsi

bilit

ies

• Group's Cyber security strategy and related Cyber security program and plan;

• Policies, procedures, guidelines and processes;

• Regulatory compliance oversee;

• Cyber security assurance and remedy plans monitoring;

•  Integrated reporting;

• Overseeing the disaster recovery and business continuity plans;

• Education, Training & Awareness.

Moreover, Cyber Security response managers within Solution Centers and Cyber Security Risk managers within business lines

will report also to Head of Cyber Security (CISO) to coordinate activities, plans, countermeasures, and emergency responses.

Risk-based Approach

Security by Design

Global ICT / Cyber Security

Thank you