Accenture, Dragos, SANS Launch $10M Initiative for Small US Utilities
Three firms announce a new foundation providing free OT security tools and training to under-resourced US water, electric, and gas utilities.
Key points
- The Community Cyber Resilience Foundation will provide $10 million in funding and services to defend small utilities.
- Up to 500 utilities in the first phase will receive free Dragos Platform access, hardware, and deployment support.
- Eligible organizations must be US-based water, wastewater, electric, or natural gas utilities with under $100 million in annual revenue.
Accenture, Dragos, and the SANS Institute announced the Community Cyber Resilience Foundation on Tuesday to help under-resourced US utilities protect their operational technology environments. The partners are contributing roughly $10 million in a mix of direct funding and professional services to support this initiative.
The first phase of the program will cover up to 500 utilities, providing them with free security tools, necessary equipment, deployment assistance, and staff training. According to SecurityWeek, participants will receive access to the Dragos Platform along with related services to bolster their defenses.
Context and Background
Accenture will handle the technical setup, integration, and continued support for the security tools within each participating utility’s environment. This operational support ensures that the software is correctly implemented and maintained within complex industrial control systems.
SANS Institute will provide training for utility staff in ICS and OT security, enabling teams to run their own defenses internally after the initial deployment. This educational component aims to build long-term internal capacity rather than relying solely on external vendors for ongoing protection.
The foundation will also fund the specific hardware required to deploy and run the Dragos Platform effectively. Additionally, the program connects participants to a peer network of utilities, allowing them to share operational experience and best practices with other industry operators facing similar challenges.
Who Is Affected
To qualify for the program, a utility must be based in the United States and generate less than $100 million in annual revenue. This financial threshold applies to water, wastewater, electric, and natural gas providers across the country.
The companies estimate that this revenue bar covers more than 50,000 organizations, representing over 97% of all US utilities. These smaller entities often struggle with limited funding, workforce shortages, and aging technology, particularly those serving rural or underserved communities.
The initiative builds on the existing Dragos Community Defense Program, which launched in December 2023 and provides free access to the Dragos Platform for more than 100 utilities with less than $100 million in annual revenue. This new foundation expands that model with additional funding and broader support services.
The announcement comes four months after Accenture agreed to acquire a majority stake in Dragos as part of an OT cybersecurity push valued at roughly $4.1 billion. The partners cited recent attacks on more than 100 US water systems across over a dozen states as a key driver for this expanded effort.
Dragos CEO Robert M. Lee stated that adversaries are aggressively targeting utilities and attacking operational environments that provide life-sustaining services. He noted that many small operators lack the capacity to defend against these specific threats without external assistance.
What should you do?
Utilities should review their current revenue figures and operational technology posture to determine if they meet the eligibility criteria for the Community Cyber Resilience Foundation. Organizations that qualify should monitor official announcements from Accenture, Dragos, or SANS for application deadlines and submission requirements.
What to do and how to stay safe: Accenture
- Verify if your organization meets the under $100 million annual revenue requirement and is a US-based water, electric, or gas utility.
- Monitor official channels from Accenture, Dragos, and SANS for application windows and specific eligibility documentation requirements.
- Assess current operational technology security gaps to understand how free tools and training could address existing workforce or funding shortages.
- Engage with peer networks or industry groups to share operational experiences and learn about defensive strategies used by similar utilities.
Step-by-step guide: Mobile Device Security: How to Protect Data Beyond Passwords
General security guidance from the Threat Times newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
Who is eligible for the Community Cyber Resilience Foundation?
US-based water, wastewater, electric, or natural gas utilities with annual revenue under $100 million are eligible to apply for the program.
What support do participants receive?
Participants receive free access to the Dragos Platform, necessary hardware, deployment help from Accenture, and ICS/OT security training from SANS.
How much funding is involved in this initiative?
Accenture, Dragos, and SANS are contributing roughly $10 million in a mix of funding and services to launch the foundation.
