Cybersecurity Forums have become a practical meeting point for water utilities, power operators, regulators, vendors, academics, and local stakeholders who need a shared view of risk without turning public engagement into alarmism. As of September 3, 2026, the event calendar shows a mix of current, scheduled, and recently concluded forums that address cyber threats to water systems, hydropower operations, public power utilities, and wider lifeline infrastructure.
The timing matters because these forums are not all serving the same audience. Some are technical conferences aimed at operational technology and secure design. Others are sector convenings for public power or water utility staff. A few are broader community or interdisciplinary meetings where cybersecurity is one topic among resilience, governance, safety, and infrastructure planning. For industry event planners and utility communicators, that distinction affects who should be in the room, what level of technical detail is appropriate, and how public-facing discussions should be framed.
Why Cybersecurity Forums Are A Utility Priority
How Cybersecurity Forums Build Shared Context
The most useful Cybersecurity Forums do not treat water and power systems as abstract targets. They connect cyber risk to real operating environments: treatment plants, wastewater utilities, hydropower facilities, public power systems, energy grids, and control systems that must remain dependable during routine operations and stress events. That is why the strongest agendas tend to include multiple stakeholder groups rather than only security specialists.
The DCS-CI 2026 Conference, formally focused on the Design of Cyber Secure Critical Infrastructure, ran on September 2–3, 2026 and was in its final day as of September 3. Its published framing brought together academic, industry, regulatory, and infrastructure stakeholders to examine secure-by-design solutions across critical sectors including water systems and energy grids, according to DCS-CI 2026. That emphasis is significant because secure design is different from incident response. It asks whether systems are being built, procured, configured, and governed in ways that reduce preventable exposure before failures occur.
For community engagement, the benefit is not simply a larger audience. It is a clearer boundary between public awareness and technical disclosure. Local officials, utility boards, plant managers, engineers, and residents may all need to understand why resilience investments matter. They do not all need the same level of operational detail. A well-run forum can explain governance, staffing, training, procurement, and incident coordination without exposing sensitive configurations or creating unrealistic expectations about what a single meeting can solve.
Event Signals By Sector
Water-System Sessions
For water utilities, Cybersecurity Forums are increasingly tied to operational technology, municipal constraints, and the practical limits of small-system staffing. The ISA Automation Summit and Expo panel scheduled for September 28, 2026 is framed around cybersecurity in U.S. water systems and lessons from recent cyberattacks affecting municipal water systems. The research notes also state that the panel references about 144,000 public water systems in the United States and risk frameworks such as ISA/IEC 62443.
That scale matters for event design. A large urban utility with dedicated security staff will not approach cybersecurity planning the same way as a smaller public water system with limited personnel and aging equipment. A forum that assumes uniform maturity across utilities risks missing the audience that needs the most practical guidance. Useful water-sector programming should separate board-level governance, operator training, vendor access controls, incident communications, and long-term modernization so participants can act without being buried in technical vocabulary.
WaterISAC’s October 2026 programming adds another useful format signal. Its Physical Threat Briefing was scheduled for October 7, 2026, and the H2OEx Chicago tabletop exercise was scheduled for October 15, 2026. The research describes these as water and wastewater utility opportunities that combine threat updates, including cyber and physical issues, with hands-on resilience exercises. Tabletop formats can be especially valuable because they test coordination patterns: who calls whom, what gets escalated, how public messaging is handled, and which assumptions fail under time pressure.
Power And Hydropower Sessions
Power-focused Cybersecurity Forums are developing along a parallel track. The American Public Power Association’s Cybersecurity & Technology Summit was scheduled for September 13–16, 2026, with a public power utility focus, sessions involving federal partners and utility experts, and discussion of strategies to use AI tools. The available research does not provide session-level technical claims, so the safest reading is that the summit is a coordination and practice-sharing venue rather than proof of any specific technical control or product outcome.
Clean Currents 2026 was scheduled for September 21–25, 2026 in Phoenix, Arizona. FedCenter’s event listing describes it as a hydropower and water-power conference covering topics including cybersecurity of hydropower operations, renewable energy integration, safety, regulatory issues, and licensing issues for water power systems through Clean Currents. This is a useful reminder that cyber risk in power settings is rarely isolated from safety, compliance, plant operations, and maintenance cycles.
The Billington Critical Infrastructure CyberSecurity Summit, scheduled for November 17–18, 2026 in San Antonio, Texas, broadens the frame across lifeline sectors named in the research: water, power, communications, and transportation. From a telecom community-engagement perspective, that cross-sector grouping is notable. Communications systems support utility coordination, outage response, remote monitoring, vendor access, and public alerts. Discussions about water and power cybersecurity are less complete if connectivity dependencies are treated as background infrastructure rather than a shared operational dependency.
What Participants Should Evaluate
Agenda Fit And Operational Relevance
Not every forum with a cybersecurity label will be equally useful for every participant. Utility leaders should compare agendas against their own operating questions: whether the event addresses governance, incident response, control system segmentation, vendor management, workforce training, insurance expectations, or public communications. The research provided here supports the existence and general focus of several events, but it does not provide detailed technical curricula for each session. That limits any claim about depth or instructional value.
The recently concluded Water Infrastructure Conference, held August 30–September 2, 2026 in Indianapolis, shows how cybersecurity-adjacent topics can sit inside a broader water infrastructure program. The research notes that it included sessions on deploying AI, improving asset management, and compiling lead service line inventories, and that utility attendees included engineers focused on security of treatment plants and SCADA systems. Since the event had already concluded by September 3, it should be treated as a recent reference point, not an opportunity for new registration.
Questions For Community-Facing Sessions
Community sessions need a different structure than closed technical briefings. A public meeting should clarify why water and power systems face cyber risk, what agencies and utilities are doing at a governance level, and how emergency communications would work if service were affected. It should avoid sensitive operational details, vendor-specific access information, or step-by-step descriptions that could create security exposure.
- Who is the intended audience: operators, executives, regulators, local officials, vendors, residents, or mixed groups?
- Does the agenda distinguish cyber threats from physical threats and all-hazards resilience?
- Are tabletop exercises included, or is the format limited to presentations?
- Will public communications, mutual aid, and telecom dependencies be addressed?
- Does the forum explain limits of evidence, especially around AI tools or early-stage security practices?
These questions help keep the discussion evidence-based. They also reduce the risk of turning a public forum into a generalized warning session. Community confidence is built through clear roles, realistic preparedness, and repeated engagement. It is not built through broad claims that cannot be linked to budgets, staffing, training, or operating procedures.
Community Engagement Needs A Technical Baseline

Community engagement works best when participants share enough technical language to ask useful questions. In water and power settings, that baseline may include the difference between business IT and operational technology, the role of SCADA systems, the meaning of incident response, and the practical constraints of replacing field equipment. Public audiences do not need engineering depth, but they do need enough context to understand why resilience planning takes time and why some details cannot be discussed openly.
There is also a workforce angle. Forums bring together people who may not usually interact: plant operators, city staff, elected officials, cybersecurity teams, emergency managers, educators, and communications providers. Cross-sector learning resources, including related community education sites such as classroom learning resources, can support broader literacy when they are used carefully and kept distinct from sensitive operational training.
The AWRA 2026 Annual Water Resources Conference, scheduled for October 26–29, 2026 in Philadelphia, is another example of an interdisciplinary setting. The research characterizes it as a leading water-sector gathering focused on water governance and resilience, with emerging technologies and infrastructure threats, including cybersecurity in water supply and treatment, becoming expanding topics. Based on the information provided, cybersecurity appears to be part of a wider water-resources discussion rather than the sole focus.
Cybersecurity Forums For Water And Power
Cybersecurity Forums in late 2026 show a clear pattern: water and power cyber risk is being discussed less as a narrow IT issue and more as an infrastructure, governance, and community coordination issue. The strongest opportunities appear to be those that match the right audience to the right format: secure-design conferences for technical and regulatory stakeholders, utility summits for operators and executives, tabletop exercises for response teams, and interdisciplinary water meetings for governance and resilience planning.
The limits of the available information should be kept in view. The research confirms dates, broad topics, and sector focus for the events listed, but it does not verify detailed session content, speaker claims, control maturity, or measured security outcomes. For that reason, these forums should be treated as engagement and learning opportunities rather than evidence that a utility, sector, or technology has solved the underlying risk. The practical value will depend on follow-through: updated procedures, clearer communication paths, better procurement questions, stronger training, and sustained coordination across water, power, communications, and local government.