“Securing the next 250” is the theme of this year’s Cybersecurity Awareness Month. A secure infrastructure is key to a secure nation. The Cybersecurity and Infrastructure Security Agency (CISA) advises any organization that owns or operates critical infrastructure to practice the three Rs of cybersecurity:
Reduce vulnerabilities
Replace end-of-support devices
Recover quickly to sustain operations
Across the country, efforts are in place to follow this advice.
Protecting the Water Supply
Water systems are a key security concern, as many utilities rely on internet-connected operational technology to monitor and control pumps, valves, and treatment processes, creating potential entry points for attackers. This high risk is complicated by the fact that many water utilities are small organizations with limited budgets, and they often continue to depend on multiple contractors to maintain aging equipment.
To mitigate these risks, the federal government has begun several programs to support local water utilities of all sizes. Project Watershed 250 is a six-month pilot in Texas designed to identify vulnerabilities in water systems and help utilities address them using cybersecurity and AI tools. Federal agencies, Texas Cyber Command, and private-sector technology companies will work together to find and fix vulnerabilities. If successful, this program could serve as a model to be used nationwide.
The Water Watch Center, a joint effort between the National Rural Water Association and DEF CON Franklin (a project of the Cyber Policy Initiative at the University of Chicago Harris School of Public Policy), is focused on helping utilities serving fewer than 10,000 people (which are the majority of the nation’s community water systems). As part of the initiative, a team of cybersecurity firms will design and deliver services to secure water systems that can be replicated to small providers across the country.
Hardening the Power Grid
Similar to water systems, modern grid infrastructure increasingly depends on complex, connected technology that must remain operational 24/7.
A recent executive order gives the Energy Department broader authority to block equipment, software, and services from being used by power companies. It prohibits the purchase, import, or installation of certain foreign-produced equipment. This ban is based on the concern that foreign suppliers could access power systems remotely through installed equipment.
The bipartisan Senate bill, the Quantum Grid Utility Assurance and Resilient Defense Act, leans forward to ensure that power providers are prepared to meet quantum-computing threats and post-quantum cryptography standards before quantum computing is a reality. The bill directs the Federal Energy Regulatory Commission to update reliability regulatory standards to include consideration of post-quantum technology and threats.
Protecting Financial Systems
While not a utility, our nation’s financial infrastructure is critical to daily life and needs to be similarly hardened against current and future threats.
The Treasury Department’s Quantum-Readiness Task Force brings together government officials and financial institutions, along with market infrastructure operators and technology providers, to direct the shift to post-quantum cryptography. Among the post-quantum coordination efforts, the task force will assess the readiness of technology vendors and other third parties to meet future threats.
Earlier this year, the Treasury Department similarly convened an Artificial Intelligence Executive Oversight Group that developed guidance for secure AI adoption in financial services, including governance, data, transparency, fraud, and digital identity.
To learn more about how agencies are evaluating and protecting connected infrastructure systems, check out these resources:
The Easy Button for Securing Critical Infrastructure: Hardware-Enforced Data Diodes for OT-to-IT/Cloud (October 1, 2026; virtual) – In this SIGNAL Media webinar, experts will discuss a core reality for critical infrastructure: software-only perimeter defenses are no longer enough.
Federal News Networks Cyber Leaders Exchange 2026 (October 1–2, 2026; virtual) – Federal cyber leaders and industry experts discuss how agencies can secure the AI-driven federal enterprise while advancing innovation and mission delivery.
Hacker Halted 2026 - Cybersecurity Conference in Atlanta, GA (October 8–9, 2026; Atlanta, GA) – This event will explore the carnival of cyber threats, tricks, and triumphs. It is a celebration of creativity, curiosity, and critical thinking, qualities that define the best in cybersecurity.
Cybersecurity Summit 2026 (October 14, 2026; Reston, VA) – Leaders from federal, state, and academia, along with private-sector innovators and cybersecurity experts, will explore cybersecurity, advanced technologies, threat assessment and mitigation, utilization of Agentic AI and Zero Trust principles, fostering a highly skilled and adaptive cyber workforce, and more.
Transit Cybersecurity Framework Community Profile (white paper) – This paper details a cybersecurity framework that is aligned with transit-sector priorities and industry best practices. It provides organizations with a structured approach to prioritizing cybersecurity activities, improving resilience, and strengthening protection of operational technology and transportation infrastructure.
Cybersecurity for the Water and Wastewater Sector: Build Architecture (white paper) – As water utilities become increasingly connected, secure remote access has become essential for maintaining operational technology while minimizing cyber risk. This NIST guide presents practical cybersecurity architectures that help water and wastewater organizations protect SCADA systems, remote facilities, and industrial control environments.
Office of Electricity Strategic Plan (white paper) - The Office of Electricity Strategic Plan outlines the Department of Energy’s strategy for modernizing America’s electric grid to support economic growth, national security, and rising electricity demand.
For more information on cybersecurity for national infrastructure, search for additional events and resources on GovEvents and GovWhitePapers.