2027 Event Agenda

Panel Description:

As utilities accelerate grid digitization, integrating IT and OT environments introduces unprecedented cyber risk across field devices, control systems, and cloud-connected infrastructure. Managing vulnerabilities across these environments requires more than traditional patch management - it demands real-time vulnerability intelligence, operational prioritization, and coordination between IT security and grid operations teams.

This panel brings together cybersecurity leaders from utilities and vulnerability intelligence experts to discuss how organizations are evolving their operating models to address vulnerability risk in operational technology (OT) environments. Panelists will examine how utilities in 2026 can operationalize advanced vulnerability intelligence tools, prioritize remediation efforts for increasingly interconnected and digital assets, and embed vulnerability management as a core element of evolving grid resilience strategies to address emerging cyber threats and regulatory requirements.

The discussion will highlight practical approaches utilities are using to manage vulnerabilities at scale across substations, control centers, DER platforms, and connected field devices, while maintaining reliability and operational continuity.

Discussion topics will include:

1. From Vulnerability Data to Operational Action

How utilities can transform vulnerability intelligence into actionable operational decisions across OT and IT systems.

Topics include:

• Prioritization of vulnerabilities affecting grid infrastructure
• Threat intelligence vs vulnerability intelligence
• Integrating vulnerability intelligence with SOC and OT monitoring

2. Managing Vulnerabilities in Operational Technology

OT environments present unique constraints:

• Limited patch windows
• Legacy systems
• Vendor dependencies

Panelists will discuss risk-based approaches to remediation that maintain grid reliability while reducing exposure.

3. Threat Exploitation in Critical Infrastructure

Experts from VulnCheck will share insights on:

• Actively exploited vulnerabilities targeting industrial environments
• Exploit intelligence and early warning signals
• How utilities can stay ahead of threat actors.

4. Scaling Vulnerability Programs Across the Grid

Leaders of NextEra Energy and other utilities will discuss:

• Aligning vulnerability management with grid modernization initiatives
• Coordinating IT security, OT engineering, and field operations
• Governance and operating models for vulnerability response.

5. Workforce and Organizational Transformation

Utilities are increasingly creating cross-functional vulnerability response teams that bridge:

• IT security
• OT operations
• asset management
• vendor risk management

The panel will explore how utilities are evolving their organizations to support this shift.

Learning Objectives / Takeaways

Attendees will learn:

• How utilities prioritize vulnerabilities affecting critical grid infrastructure
• Methods to operationalize vulnerability intelligence in OT environments
• Best practices for coordinating IT and OT teams in vulnerability response
• Approaches to reducing cyber risk while maintaining grid reliability
• How exploit intelligence can improve vulnerability remediation strategies

Intended Audience

• Utility CISOs / CSOs
• OT and grid security leaders
• Vulnerability management and threat intelligence teams
• Asset Management and Grid Operation peers
• Risk, compliance, and NERC CIP stakeholders