Grid modernization eliminates traditional air gaps as utilities embrace cloud integration, smart grid technologies and real-time automation. Hydro Ottawa faced this reality as severe climate events demonstrated the need for resilient infrastructure while new projects demanded secure interconnections between previously isolated OT systems. The convergence of IT and OT environments creates expanded attack surfaces where insecure integrations pose significant risks.

Hydro Ottawa developed a systematic six-phase threat modeling process integrating MITRE ATT&CK and MITRE Defend frameworks. This methodology enforces cross-functional alignment through RASI models, ensuring security becomes a design element rather than post-deployment fix.

In this session, the panel of experts will share insights:

• Why grid modernization increases OT risk and demands a proactive threat-modeling approach;
• How MITRE-based methodologies enable structured risk identification and actionable mitigation;
• Lessons learned from applying the threat-modeling framework to two complex OT deployments.