ESRA provided a comprehensive awareness on impacts potentially occurring due to Cyber Security issues, valuating a large and complex infrastructure. This allowed Cyber Security managers in having a continuous risk evaluation measurement and comparing current risk to the risk reduction expected out of the cyber security strategy.