Accenture, Dragos and SANS Commit $10 Million to Shield Small US Utilities

Program Overview

The partnership between Accenture, Dragos and the SANS Institute announced a $10 million initiative aimed at strengthening the cyber defenses of small electric utilities in the United States. The first phase will target up to 500 utilities, offering them free security tools, hardware, deployment assistance and training.

Why Small Utilities Are At Risk

Smaller electricity providers often operate with limited budgets and fewer dedicated IT staff. This makes them attractive targets for ransomware groups and nation‑state actors seeking to disrupt critical infrastructure. A recent report from the Cybersecurity and Infrastructure Security Agency highlighted a rise in attacks on regional power distributors, many of which lack robust detection and response capabilities.

Key Components of the Initiative

The program is built around four core elements:

• Free security tools – Participants receive licenses for advanced threat detection platforms and endpoint protection solutions.
• Hardware upgrades – Network segmentation devices and secure routers are supplied to replace legacy equipment.
• Deployment assistance – Teams from Accenture and Dragos work on‑site to configure and integrate the new tools.
• Training and certification – Utility staff gain access to SANS courses that cover incident response, industrial control system security and risk management.

Free Security Tools

Accenture will provide a suite of cloud‑based analytics that can monitor network traffic for anomalies. Dragos contributes its industrial control system threat intelligence platform, which is recognized for its ability to identify malware targeting power grid components.

Hardware Upgrades

Modern firewalls and secure communication gateways will replace aging devices that are vulnerable to exploitation. The hardware is pre‑configured to align with the NIST Cybersecurity Framework, ensuring a consistent security posture across participating utilities.

Deployment Assistance

Accenture’s consulting teams will conduct site assessments, develop implementation roadmaps and oversee the rollout of the new solutions. Dragos engineers will focus on calibrating the threat intelligence feeds to the specific operational technology environment of each utility.

Training and Certification

SANS will deliver both virtual and in‑person courses. Topics include:

1. Fundamentals of industrial control system security.
2. Incident response planning for power distribution networks.
3. Risk assessment techniques aligned with federal guidelines.

Upon completion, participants earn certifications that are recognized across the energy sector.

Eligibility and Application Process

Utilities must meet three criteria to qualify for the first phase:

• Serve fewer than 100,000 customers.
• Operate within the United States.
• Demonstrate a commitment to ongoing cybersecurity improvement.

Eligible utilities can submit an application through a dedicated portal hosted by the SANS Institute. The review panel, composed of representatives from the three partners, will select the first cohort based on risk exposure and geographic diversity.

Potential Impact on the Energy Sector

By equipping small utilities with enterprise‑grade defenses, the initiative seeks to close a critical gap in the nation’s energy security. Analysts from the SecurityWeek outlet note that a more resilient small‑scale grid can reduce the overall attack surface and limit the spread of malware to larger transmission operators.

In addition to immediate protection, the program aims to foster a culture of continuous improvement. Utilities that receive training are expected to develop internal capabilities that persist long after the initial deployment.

Broader Industry Collaboration

The $10 million effort reflects a growing trend of public and private collaboration in the cyber domain. The Department of Energy has previously launched grant programs to support grid modernization, and this new partnership adds a focused layer of cybersecurity assistance.

Stakeholders anticipate that the model could be replicated for other critical infrastructure sectors, such as water and transportation, where small operators face similar challenges.

As the first phase rolls out, the participating utilities will serve as case studies for measuring effectiveness. Success metrics include reduced incident response times, lower frequency of ransomware attempts and increased staff proficiency in handling cyber threats.

Overall, the initiative represents a proactive step toward safeguarding the nation’s power supply by ensuring that even the smallest providers have access to the tools and expertise needed to defend against sophisticated cyber attacks.