The Challenge
A portfolio of eight cyber-security projects (£15m) supporting critical national electricity infrastructure had drifted outside governance tolerances. Projects were overspent, out of scope, delayed, and in one case long overdue closure.
At the same time, additional investment was required to mitigate emerging cyber risks across multiple UK sites, potentially expanding the portfolio to £50m and 140 FTE.
The Approach
ESI led a structured recovery and expansion programme:
- Established baseline plans, risk logs, and standardised governance documentation
- Brought projects back within sanctioned tolerances
- Reduced forecast spend through corrective action and re-sanctioning
- Developed and secured approval for £50m expanded investment
- Structured delivery across 30 UK sites integrating new systems
Strong governance reset and commercial discipline were central to stabilising the portfolio and securing future funding.
The Outcome
- Portfolio stabilised and aligned with corporate governance standards
- £2m forecast cost reduction achieved
- £50m funding secured for expanded delivery
- Mitigated critical cyber security risks across national electricity infrastructure
- Established sustainable programme management controls