Utilities are modernizing faster than the controls meant to protect them. DERs are multiplying at the grid edge, operations are going remote, third parties touch more systems, and once-isolated IT and OT environments are converging — much of it on aging infrastructure never designed to be defended. This session reframes utility cybersecurity around three outcomes that resonate in the control room: reliability, resiliency, and recovery. We examine where traditional, IT-centric security breaks down in OT — flat networks, downtime constraints, unmanaged devices, identity gaps, and limited visibility — then define what resilient security looks like in practice: segmentation, secure remote access, OT-aware visibility, identity-driven access, and incident containment. Each is grounded in utility-led scenarios like storm restoration, contractor access, and ransomware containment. Attendees leave knowing how to lower operational risk without disrupting operations — because resilience, not compliance, is the strategic goal.

Session Sponsored by