Abstract: Various embodiments of the present disclosure can include systems, methods, and non-transitory computer readable media configured to identify a set of features associated with at least one of a collection of residences or an energy billing period. Measured energy consumption information and a plurality of feature values can be acquired for each residence in the collection of residences. Each feature value in the plurality of feature values can correspond to a respective feature in the set of features. A regression model can be trained based on the measured energy consumption information and the plurality of features values for each residence in the collection of residences. At least one expected consumption value and at least one efficient consumption value can be determined based on the regression model.

Abstract: Various embodiments of the present disclosure can include systems, methods, and non-transitory computer readable media configured to select a set of signals relating to a plurality of energy usage conditions. Signal values for the set of signals can be determined. Machine learning can be applied to the signal values to identify energy usage conditions associated with non-technical loss.

Abstract: The disclosed technology can acquire a first set of data from a first group of data sources including a plurality of network components within an energy delivery network. A first metric indicating a likelihood that a particular network component, from the plurality of network components, is affected by cyber vulnerabilities can be generated based on the first set of data. A second set of data can be acquired from a second group of data sources including a collection of services associated with the energy delivery network. A second metric indicating a calculated impact on at least a portion of the energy delivery network when the cyber vulnerabilities affect the particular network component can be generated based on the second set of data. A third metric indicating an overall level of cybersecurity risk associated with the particular network component can be generated based on the first metric and the second metric.