EnergySec

What EnergySec does

EnergySec is a non-profit membership organization founded in 2004 and headquartered in Clackamas, Oregon, that delivers cybersecurity education, credentialing, information sharing, and consulting services to the North American electric sector. It is registered as an Information Sharing and Analysis Organization (ISAO) and is the leading provider of NERC CIP (Critical Infrastructure Protection) education in the industry, with a course catalog spanning nine CIP courses (CIP 101 through CIP 400) and two credential programs: Certified CIP Technician (C2T) and Certified CIP Compliance Professional (C3P). The organization also offers a fee-based consulting practice branded S3CUR3, covering program strategy, risk and resilience, incident response preparation, asset and configuration management, and threat and vulnerability management, aligned with frameworks such as C2M2, NIST CSF, and NERC CIP.

The business model combines tiered annual utility membership dues (ranging from $1,025 for small distribution-only utilities to $6,195 for very large BES utilities), credential and individual course fees (with a 30% member discount), a two-tiered Commercial Partner program for vendors ($5,000 Partner and $10,000 Partner+), Summit registration revenue, and emerging service fees under S3CUR3. Distribution is direct, with offerings delivered through an LMS in in-person, online instructor-led, on-demand, hybrid, and cohort-based formats. EnergySec serves roughly 160 electric utilities headquartered in 25 states plus Canadian participation, alongside industry vendors, government agencies, state regulators, national labs, and trade organizations. Its annual Security AND Compliance Summit (21st edition planned for August 2026) functions as the flagship engagement event for the community. The leadership team, anchored by founding directors and former original NERC CIP auditors, gives the organization deep regulatory and operational credibility within the utility cybersecurity domain.

Name

EnergySec

Legal name

EnergySec

Website

https://energysec.org

Company type

Private

Founded year

2004

Operating status

Operating

Headcount range

11–50 employees

Short description

EnergySec is a non-profit ISAO that delivers NERC CIP education, credentialing (C2T, C3P), information sharing, and cybersecurity services to roughly 160 electric utilities across North America, anchored by tiered membership and an annual Security AND Compliance Summit.

Ownership category

akta.pro rank

Product category

Critical Infrastructure Cybersecurity Training and Compliance Education

NAICS

Other Scientific and Technical Consulting Services (54169)

SIC

Electric Services (4911)

akta.pro primary industry

Third-Party Certification, Code Compliance & Regulatory Inspection (ASME/API/ISO) (EUAEAHAN)

akta.pro secondary industry

Governance, Risk & Compliance (GRC) Advisory & Assessments (BPAKAHAH)

Keywords

• NERC CIP education
• Cybersecurity training
• Energy sector compliance
• Critical infrastructure security
• Workforce credentialing

Headquarters

HQ city

Clackamas

HQ country

United States

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Technology or R&D, Marketing or Sales, Others

Revenue model

1. Industry Membership Dues: Tiered annual membership dues based on utility size and type (Very Large BES Utility at $6,195, Large BES Utility at $5,150, Medium BES Utility at $4,125, RTO/ISO/RC at $3,095, Small BES Utility at $2,575, Large Distribution-Only at $2,050, Small Distribution-Only at $1,025). Membership provides training discounts, access to experts, community events, and the annual Summit.
2. Professional Education and Training: Credential programs and courses including Certified CIP Technician (C2T) at $2,100 for members and Certified CIP Compliance Professional (C3P) at $4,900 for members. Individual courses available for purchase.
3. Commercial Partner Program: Two-tiered commercial partnership program: Partner level at $5,000 annually and Partner+ level at $10,000 annually. Includes brand visibility, leadership opportunities, training discounts, and Summit access.
4. Summit Registration: Annual conference revenue from registration fees. Early registration $995 (Members $697), Standard $1,095 (Members $767), Last Chance $1,195 (Members $837).

Pricing tiers

Go-to-market motion1 record

Distribution channels4 records

Marketing channels7 records

Core offering

EnergySec is a non-profit membership-based organization that provides NERC CIP cybersecurity education, credential certification programs (C2T, C3P), and professional services to the electric sector. Its portfolio includes nine individual training courses covering NERC CIP standards from foundational introduction through audit preparation, S3CUR3 consulting services across risk management, incident response, and workforce development, and an annual industry Summit serving as a community engagement channel.

Product overview

EnergySec operates as a membership-based nonprofit organization providing a unified portfolio of cybersecurity education and services for the energy sector, particularly electric utilities. The core offerings include two credential certification programs—Certified CIP Technician (C2T) and Certified CIP Compliance Professional (C3P)—complemented by nine individual training courses (CIP 101 through CIP 400) covering NERC CIP standards from foundational introduction through audit preparation and hands-on lab experience. Services branded as S3CUR3 provide consulting across five domains: Program Strategy & Development, Risk & Resilience Services, Cybersecurity Services (including incident response), Asset & Configuration Management, and Threat & Vulnerability Management. The organization also operates Community and Commercial Partner membership programs with tiered benefits, and hosts the annual Security AND Compliance Summit as its flagship industry event.

Differentiator

Problem solved

Functional benefit

Quantifiable outcome

• Serving 160 electric utilities across 25 states
• +1 more outcomes

Named customers20 records

Segments5 records

Ideal customer profiles3 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature3 records

Partnerships

Ten partnerships are on record, tiered minor.

• NWPPA (Northwest Public Power Association)minorOthersIndustry association partner listed in EnergySec's association network. NWPPA represents public power utilities in the Northwest.
• APPA (American Public Power Association)minorOthersNational trade association partner representing publicly owned electric utilities. Listed in EnergySec's association network.
• NRECA (National Rural Electric Cooperative Association)minorOthersNational association partner representing electric cooperative interests. Listed in EnergySec's association network.
• Grid ForwardminorOthersGrid modernization focused association partner listed in EnergySec's association network.
• Tech OregonminorOthersRegional technology association partner based in Oregon listed in EnergySec's association network.
• Center for Warehouse ExcellenceminorOthersAssociation partner listed in EnergySec's association network.
• Northwest Cyber Convergence (NCC)minorOthersCybersecurity focused regional partner listed in EnergySec's association network.
• InterruptminorOthersAssociation partner listed in EnergySec's association network.
• NWCC (Northwest Cyber Coalition)minorOthersRegional cybersecurity coalition partner listed in EnergySec's association network.
• MCGA (Montana Consumer Geothermal Association)minorOthersRegional association partner listed in EnergySec's association network.

Scale indicators4 records

Recent moves6 records

Expansion highlights6 records

Broad incumbents

• SANS Institute: SANS is the dominant global cybersecurity training and GIAC certification provider, offering ICS/SCADA and critical-infrastructure courses that overlap directly with EnergySec's NERC CIP curriculum. SANS is a much broader incumbent that competes for the same utility training budget with deeper catalogs and global reach.
• Trellix: Trellix (formed from McAfee Enterprise and FireEye) is a broad cybersecurity incumbent serving electric utilities with XDR, consulting, and training offerings that compete with EnergySec's S3CUR3 services. Comparable audience but a much larger portfolio play.

Direct peers

• (ISC)²: (ISC)² administers the CISSP and other globally recognized cybersecurity certifications, positioning it as a direct peer for EnergySec's C2T and C3P credential programs. While broader in scope, (ISC)² competes for the same compliance and cybersecurity professional development budgets within electric utilities.
• ISACA: ISACA provides GRC-focused certifications (CISA, CISM, CRISC) and training that directly overlaps with EnergySec's compliance and audit-focused credential offerings. ISACA serves many of the same utility compliance professionals and competes for the same enterprise training wallets.
• Electricity ISAC (E-ISAC): E-ISAC is the formal sector ISAC for the electricity subsector, designated by NERC and the U.S. government, and serves overlapping members with threat intelligence and information sharing. E-ISAC is both a potential partner and a competitive substitute for EnergySec's ISAO information-sharing value proposition.
• GIAC (Global Information Assurance Certification): GIAC, affiliated with SANS, issues vendor-neutral cybersecurity certifications and is the closest direct parallel to EnergySec's C2T and C3P credential programs. Competes for the same compliance-driven certification spend within utility security and compliance teams.

Emerging players

• Dragos: Dragos provides OT/ICS cybersecurity products, services, and training specifically focused on electric and other critical infrastructure operators. It overlaps with EnergySec's audience (utility CISOs and OT teams) and increasingly competes in workforce development and NERC-relevant training.
• Claroty: Claroty offers cybersecurity for industrial control networks serving utilities and other critical infrastructure, including training and professional services that overlap with EnergySec's S3CUR3 service portfolio. Comparable to EnergySec in customer base though differentiated by its product-led model.
• Nozomi Networks: Nozomi Networks provides OT and IoT cybersecurity for utilities, oil & gas, and other critical infrastructure, including training and professional services. Targets the same electric utility buyer as EnergySec and competes for adjacent service and training dollars.

Regional players

• FS-ISAC: FS-ISAC is the financial sector's information sharing and analysis organization, operating a similar membership-based information sharing and threat intelligence model as EnergySec. Comparable in business model and ISAO function but in a different industry vertical, useful as a structural benchmark rather than a direct competitor.

Market position

Strengths5 records

Weaknesses2 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/EnergySec
• Facebookfacebook.com/energysec

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds1 record

Investors1 record

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about EnergySec