Tech trio launches $10M initiative for under-resourced utility cybersecurity

Accenture, Dragos, and the SANS Institute launched a $10 million program this week to provide free cybersecurity resources to under-resourced utilities across the United States. The initiative aims to strengthen defenses for smaller providers that often lack the budget for robust security measures.

The risk

According to The Record, the launch follows breaches affecting more than 100 water utilities in the U.S. Government agencies continue to warn that Chinese and Russian actors are targeting energy and telecom sectors. Dragos CEO Robert Lee stated that criminals and nation-states are aggressively attacking operational environments that provide life-sustaining services to millions of Americans.

Who is exposed

The program is open to any U.S.-based water, wastewater, electric, and natural gas utilities with less than $100 million in annual revenue. The participating companies note that this revenue threshold accounts for 97 percent of all utilities in the country. The first phase will support up to 500 utilities, with potential expansion based on success.

Cost and compliance

The three organizations are collectively investing $10 million into the Community Cyber Resilience Foundation. Participants receive services at no cost, including software, hardware, deployment assistance, and training. This financial support addresses the resource gaps that leave many small utilities vulnerable to sophisticated cyber threats.

What should you do?

Managers at small utilities should assess whether their organization meets the revenue eligibility criteria for this program. Teams should also review their current operational technology visibility to identify gaps that these new tools could help address.

The background in plain language

Operational technology refers to the hardware and software that control physical devices, such as water pumps or power grids. Unlike standard IT systems, these tools manage critical infrastructure. When attackers compromise these systems, they can disrupt essential services. Teams usually need specialized tools to monitor these unique networks. Check whether your staff has the specific skills required to manage industrial security tools effectively.

What to do and how to stay safe: Accenture

• Verify if your utility meets the annual revenue threshold for eligibility in the Community Cyber Resilience Foundation.
• Audit your operational technology network to identify unmonitored devices that could be vulnerable to intrusion.
• Ensure staff members receive specialized training on industrial cybersecurity tools before deployment.
• Monitor official government alerts for emerging threats targeting energy and water sectors.

Step-by-step guide: Browser security settings are the architectural walls of your digital life

General security guidance from the Vector Tribune newsroom. It is not confirmed advice from the organisations named in this story.

Frequently asked questions

Which utilities are eligible for this program?

U.S.-based water, wastewater, electric, and natural gas utilities with less than $100 million in annual revenue are eligible.

How much money is being invested in this initiative?

Accenture, Dragos, and the SANS Institute are collectively investing $10 million into the foundation.

What specific resources will participants receive?

Participants will receive free cybersecurity software, hardware, deployment services from Accenture, and training from the SANS Institute.