In example embodiments, there is provided enhanced disturbance management for an electrical power system. An enhanced disturbance management component can be operable to read monitoring data based onpower flow measurements associated with measurement devices connected to an electrical power system, wherein the monitoring data can comprise alarm data indicative of an electrical disturbance withinthe electrical power system, and topology data indicative of a topology of the electrical power system. The enhanced disturbance management component can be operable to correlating the alarm data witha change in the topology data.