Mentions of cybersecurity within the filings of companies in the power industry rose 31% between the first and second quarters of 2021.

In total, the frequency of sentences related to cybersecurity between July 2020 and June 2021 was 96% higher than in 2016 when GlobalData, from whom our data for this article is taken, first began to track the key issues referred to in company filings.

When companies in the power industry publish annual and quarterly reports, ESG reports and other filings, GlobalData analyses the text and identifies individual sentences that relate to disruptive forces facing companies in the coming years. Cybersecurity is one of these topics – companies that excel and invest in these areas are thought to be better prepared for the future business landscape and better equipped to survive unforeseen challenges.

To assess whether cybersecurity is featuring more in the summaries and strategies of companies in the power industry, two measures were calculated. Firstly, we looked at the percentage of companies that have mentioned cybersecurity at least once in filings during the past twelve months – this was 84% compared to 69% in 2016. Secondly, we calculated the percentage of total analysed sentences that referred to cybersecurity.

Of the 50 biggest employers in the power industry, Siemens AG was the company which referred to cybersecurity the most between July 2020 and June 2021. GlobalData identified 105 cybersecurity-related sentences in the Germany-based company's filings – 1% of all sentences.

Prysmian SpA mentioned cybersecurity the second most – the issue was referred to in 0.9% of sentences in the company's filings. Other top employers with high cybersecurity mentions included Enel SpA, EON SE, and Saudi Electricity Co.

Across all companies in the power industry, the filing published in the second quarter of 2021 that exhibited the greatest focus on cybersecurity came from Enel SpA. Of the document's 4,533 sentences, 72 (1.6%) referred to cybersecurity.

This analysis provides an approximate indication of which companies are focusing on cybersecurity and how important the issue is considered within the power industry, but it also has limitations and should be interpreted carefully. For example, a company mentioning cybersecurity more regularly is not necessarily proof that they are utilising new techniques or prioritising the issue, nor does it indicate whether the company's ventures into cybersecurity have been successes or failures.

GlobalData also categorises cybersecurity mentions by a series of subthemes. Of these subthemes, the most commonly referred to topic in the second quarter of 2021 was 'data security', which made up 83% of all cybersecurity subtheme mentions by companies in the power industry.

GlobalData has compiled a list of top MNCs based on revenue. Any top companies that did not have a subsidiary were removed from the list. The latest company annual reports (2019 and 2020, where available) and websites were analysed for a total of 2,188 companies.

For a subsidiary to be included, the parent company had to have a majority ownership/control in the subsidiary. Affiliates, associates, joint operations and joint ventures were included as long as the ownership criteria was met. Subsidiary information was captured at a country level. Country names were standardised. In total, 216,898 subsidiaries were captured.