https://sled.lighthouseadvisory.consulting/feeds/utility-management.xml2026-11-11T05:15:48.728ZLighthouse Advisoryhttps://sled.lighthouseadvisory.consulting/streams/utility-management/editions/2026-11-102026-11-11T05:15:48.728Z2026-11-10T00:00:00.000Z

State regulators moved two utility AI and cyber resolutions forward this week. NARUC's water-cybersecurity resolution, which backs minimum requirements and an EPA-authorised standards body, and a resolution endorsing EPRI's SAFERai.power AI-risk framework both cleared committee and go to the Board on 11 Nov. An independent look at Project Watershed 250 shows why minimums alone are not enough: free assessments and AI tools expose gaps that small water systems lack the money, staff and governance to fix. On operations, Anglian Water reports control-room time savings from AI, a Reclamation-funded guidebook sets guardrails for treatment-plant ML, UAMPS and Basin Electric picked a transmission-scheduling agent, and APPA joined EPRI's AI forum. Gas, metering/billing and measured stormwater were thin.

State regulators moved two utility AI and cyber resolutions forward this week. NARUC's water-cybersecurity resolution, which backs minimum requirements and an EPA-authorised standards body, and a resolution endorsing EPRI's SAFERai.power AI-risk framework both cleared committee and go to the Board on 11 Nov. An independent look at Project Watershed 250 shows why minimums alone are not enough: free assessments and AI tools expose gaps that small water systems lack the money, staff and governance to fix. On operations, Anglian Water reports control-room time savings from AI, a Reclamation-funded guidebook sets guardrails for treatment-plant ML, UAMPS and Basin Electric picked a transmission-scheduling agent, and APPA joined EPRI's AI forum. Gas, metering/billing and measured stormwater were thin. 6 sources · 3 cross-source patterns Water-cyber expectations are rising while free federal support shrinks, leaving remediation funding unresolved For every open finding from a recent cyber assessment, who owns the fix, what does it cost, and which funding source pays for it after free programmes end? Regulators and public power are routing utility AI governance through EPRI-led frameworks Does the utility have a current register of AI tools with owner, autonomy level and override, ready to map to EPRI or regulator frameworks? Operational AI in water and power is being staged: advisory first, measured, then expanded What measured baseline and concurrent comparison will decide whether an AI tool moves from recommending to acting?https://sled.lighthouseadvisory.consulting/streams/utility-management/editions/2026-11-092026-11-10T07:05:24.747Z2026-11-09T00:00:00.000Z

Security and operations both showed AI's real shape tonight. Dragos's Senate testimony, recirculated this week, describes an AI model that found a Monterrey water utility's OT gateway on its own and failed only after about 2,800 rejected logins, and a gas utility where an AI assistant knocked its own access offline. Indiana utilities describe AI speeding attacks while small systems struggle with new state evaluation duties. On operations, Goulburn-Murray Water's in-house AI pump monitoring let staff stop a failing pump within eight minutes; a K-water-backed leak pilot in Sarawak confirmed 23 leaks in four days against preset targets; Spain's Nedgia began a staged ML gas-pressure pilot; and a Quebec firm outlined 10–12 week AI flood-forecasting pilots. NARUC's water-cyber vote is still underway. U.S. billing AI, stormwater results and co-op news were thin.

Security and operations both showed AI's real shape tonight. Dragos's Senate testimony, recirculated this week, describes an AI model that found a Monterrey water utility's OT gateway on its own and failed only after about 2,800 rejected logins, and a gas utility where an AI assistant knocked its own access offline. Indiana utilities describe AI speeding attacks while small systems struggle with new state evaluation duties. On operations, Goulburn-Murray Water's in-house AI pump monitoring let staff stop a failing pump within eight minutes; a K-water-backed leak pilot in Sarawak confirmed 23 leaks in four days against preset targets; Spain's Nedgia began a staged ML gas-pressure pilot; and a Quebec firm outlined 10–12 week AI flood-forecasting pilots. NARUC's water-cyber vote is still underway. U.S. billing AI, stormwater results and co-op news were thin. 6 sources · 2 cross-source patterns AI speeds attackers toward utility OT boundaries, but credentials, isolation and segmentation are still what stop them Are all IT-reachable OT gateways and site firewalls free of default or single-password access, and would a burst of failed logins be noticed within minutes? Water and gas network AI pilots this week keep people in the loop and stage from monitoring to action For each operational AI pilot, what decision does the AI make versus recommend, and how are false alarms and misses measured before authority expands?https://sled.lighthouseadvisory.consulting/streams/utility-management/editions/2026-11-072026-11-08T05:04:28.875Z2026-11-07T00:00:00.000Z

OT security dominates tonight. UBC researchers showed an attacker on the network path can selectively block encrypted commands to a cloud-connected water-treatment testbed, delaying pumping by about 15 minutes without breaking encryption. ISMG reports frontier AI agents can now step through OT attack chains with human guidance but remain noisy, and independent experts warn against hype. Singapore's CSA issued a remote-OT-access advisory after European refrigeration attacks, naming water and energy utilities. On the operations side, Fulton County, Georgia, closes an RFP on 13 Nov for an AI digital water-operations platform that federates GIS, SCADA, hydrant and water-quality data. Staffordshire, England, added AI cameras at flood trash screens against a stated 75-crew-day inspection baseline. NARUC's water-cyber vote (8–11 Nov) is still pending. Fresh US gas, billing-AI and co-op evidence was thin.

OT security dominates tonight. UBC researchers showed an attacker on the network path can selectively block encrypted commands to a cloud-connected water-treatment testbed, delaying pumping by about 15 minutes without breaking encryption. ISMG reports frontier AI agents can now step through OT attack chains with human guidance but remain noisy, and independent experts warn against hype. Singapore's CSA issued a remote-OT-access advisory after European refrigeration attacks, naming water and energy utilities. On the operations side, Fulton County, Georgia, closes an RFP on 13 Nov for an AI digital water-operations platform that federates GIS, SCADA, hydrant and water-quality data. Staffordshire, England, added AI cameras at flood trash screens against a stated 75-crew-day inspection baseline. NARUC's water-cyber vote (8–11 Nov) is still pending. Fresh US gas, billing-AI and co-op evidence was thin. 5 sources · 1 cross-source patterns New OT threats this week point back to network paths, remote access and local fallback, not AI-specific defences For every remote or cloud-dependent OT command and vendor access path, is there monitoring, MFA/allowlisting and a tested local or manual fallback?https://sled.lighthouseadvisory.consulting/streams/utility-management/editions/2026-11-062026-11-07T15:17:22.402Z2026-11-06T00:00:00.000Z

Tonight centers on regulatory packaging of water cyber and electric AI governance: the NARUC Annual Meeting draft PDF for 8–11 Nov includes WC-1 (WRRO minimums, CISA restaffing, FOIA-protected sharing) and EX-1 (EPRI SAFERai.power AI risk frameworks), while EPA’s advisory on AI providers requesting SCADA logs underscores OT data exposure. On operations, AEML states agentic outage AI must stay recommendation-only; AiDetect opens human-gated PACP coding to any U.S./Canada inspection software; Aalto’s peer-reviewed sewer ML+tracer rankings are only weakly concordant; Bluefield forecasts AI-native digital water and metering analytics growth; Blacktown’s vendor case shows stormwater CCTV AI informing CIP. US independent gas and transactional billing AI remain thin.

Tonight centers on regulatory packaging of water cyber and electric AI governance: the NARUC Annual Meeting draft PDF for 8–11 Nov includes WC-1 (WRRO minimums, CISA restaffing, FOIA-protected sharing) and EX-1 (EPRI SAFERai.power AI risk frameworks), while EPA’s advisory on AI providers requesting SCADA logs underscores OT data exposure. On operations, AEML states agentic outage AI must stay recommendation-only; AiDetect opens human-gated PACP coding to any U.S./Canada inspection software; Aalto’s peer-reviewed sewer ML+tracer rankings are only weakly concordant; Bluefield forecasts AI-native digital water and metering analytics growth; Blacktown’s vendor case shows stormwater CCTV AI informing CIP. US independent gas and transactional billing AI remain thin. 7 sources · 3 cross-source patterns Utility AI touching OT or coded asset records should stay human-gated Where would an AI recommendation write to SCADA, OMS, or the asset register without a named human approver? NARUC’s Nov meeting packages water cyber minimums with electric AI risk frameworks Before 11 Nov, which OT remote-access and AI use-case gaps would a WRRO or SAFERai-style review expose first? CCTV/condition AI for buried networks still needs corroboration before capital lock What independent field or tracer evidence and QA sample will corroborate AI condition ranks before CIP approval?https://sled.lighthouseadvisory.consulting/streams/utility-management/editions/2026-11-052026-11-06T11:56:19.833Z2026-11-05T00:00:00.000Z

OT security and small-utility operations dominate tonight. InsideEPA reports a NARUC draft resolution headed for an 8–11 Nov vote that would urge Congress to create an EPA-backed Water Risk and Resilience Organization for minimum water cyber requirements; NIST's October guidance and a new Springer scoping review both insist AI for water SCADA stay human-governed and follow remote-access foundations after mid-2026 PLC attacks. On the operations side, Freeland, Pennsylvania, put a grant-funded digital twin, leak loggers and limited AMI to work on non-revenue water, and Cherryland Electric Cooperative used InsightAI on AMI voltage data to find failing equipment. EU Opti-SITE work and a Duke/Accenture methane case add stormwater and US gas colour, both still early and vendor-tinged.

OT security and small-utility operations dominate tonight. InsideEPA reports a NARUC draft resolution headed for an 8–11 Nov vote that would urge Congress to create an EPA-backed Water Risk and Resilience Organization for minimum water cyber requirements; NIST's October guidance and a new Springer scoping review both insist AI for water SCADA stay human-governed and follow remote-access foundations after mid-2026 PLC attacks. On the operations side, Freeland, Pennsylvania, put a grant-funded digital twin, leak loggers and limited AMI to work on non-revenue water, and Cherryland Electric Cooperative used InsightAI on AMI voltage data to find failing equipment. EU Opti-SITE work and a Duke/Accenture methane case add stormwater and US gas colour, both still early and vendor-tinged. 7 sources · 2 cross-source patterns Water OT AI should stay recommendation-only until remote-access and inventory basics exist Before any OT AI pilot, which internet-facing controllers still lack MFA-protected remote access and a current asset inventory? Small and rural utilities are operationalising AMI and digital twins for anomaly and leak work Which AMI or SCADA feeds are already available for a scoped anomaly or leak pilot without a greenfield AI platform?https://sled.lighthouseadvisory.consulting/streams/utility-management/editions/2026-11-042026-11-05T05:43:41.764Z2026-11-04T00:00:00.000Z

A thin day. Oshawa Power, a municipally owned Ontario utility, extended its AI assistant to move requests and balance checks behind multi-factor verification. By contrast, Plumas-Sierra Rural Electric Cooperative told members it will not use AI for customer service. Brownsville PUB in Texas began AMI-based leak alerts, a rule-based base layer for future metering analytics. No item reports measured results; US gas distribution, stormwater AI and OT/AI security had no fresh evidence.

A thin day. Oshawa Power, a municipally owned Ontario utility, extended its AI assistant to move requests and balance checks behind multi-factor verification. By contrast, Plumas-Sierra Rural Electric Cooperative told members it will not use AI for customer service. Brownsville PUB in Texas began AMI-based leak alerts, a rule-based base layer for future metering analytics. No item reports measured results; US gas distribution, stormwater AI and OT/AI security had no fresh evidence. 3 sources · 1 cross-source patterns Utilities are drawing explicit, public lines on member-facing AI, in opposite directions Which account interactions will members accept from AI, and what verification and human-access guarantees are published?https://sled.lighthouseadvisory.consulting/streams/utility-management/editions/2026-11-032026-11-04T15:02:09.251Z2026-11-03T00:00:00.000Z

Water control rooms are where AI is moving fastest: the Ofwat-funded SAM project completed its AI architecture and draft alarm guidelines, and Welsh Water's ORAI is in parallel running with operators accountable. Korea reported AI flood forecasts verified by forecasters and a first urban flood pilot in Seoul. On billing, Winter Haven, Florida weighed a low-cost agent-assist tool joining billing and meter data, and Stadtwerke Witten reports a voice agent resolving about half of calls. Stadtwerke Kiel is using AI-supported drones for methane surveys. No item reports independently measured results; US gas and OT/AI security stayed thin.

Water control rooms are where AI is moving fastest: the Ofwat-funded SAM project completed its AI architecture and draft alarm guidelines, and Welsh Water's ORAI is in parallel running with operators accountable. Korea reported AI flood forecasts verified by forecasters and a first urban flood pilot in Seoul. On billing, Winter Haven, Florida weighed a low-cost agent-assist tool joining billing and meter data, and Stadtwerke Witten reports a voice agent resolving about half of calls. Stadtwerke Kiel is using AI-supported drones for methane surveys. No item reports independently measured results; US gas and OT/AI security stayed thin. 6 sources · 2 cross-source patterns Water control rooms are adopting AI alarm triage with operators kept accountable and staged assurance Before relying on AI alarm triage, what replay or parallel-run evidence shows no critical alarm is missed? Billing and metering AI is entering municipal utilities as scoped agent-assist and routine-transaction tools Which billing transactions may AI complete or explain, and how will answer accuracy be audited against source records?https://sled.lighthouseadvisory.consulting/streams/utility-management/editions/2026-11-022026-11-03T19:15:13.417Z2026-11-02T00:00:00.000Z

A small edition. Swedish grid companies, including municipally owned Umeå Energi, are building an AI agent that runs thousands of planning alternatives on their existing calculation models, starting with analysis only. In gas, Korean distributor Gyeongnam Energy was recognised for an AI-based situation room and drone response used during landslides, and public enterprise KOGAS-Tech tendered a small AI pipeline safety pilot. None reports measured results. US gas, billing AI, stormwater and OT security evidence stayed thin for the date.

A small edition. Swedish grid companies, including municipally owned Umeå Energi, are building an AI agent that runs thousands of planning alternatives on their existing calculation models, starting with analysis only. In gas, Korean distributor Gyeongnam Energy was recognised for an AI-based situation room and drone response used during landslides, and public enterprise KOGAS-Tech tendered a small AI pipeline safety pilot. None reports measured results. US gas, billing AI, stormwater and OT security evidence stayed thin for the date. 3 sources · 2 cross-source patterns Utilities are staging AI as decision support that works through existing models and control rooms At each stage of an AI rollout, which outputs are advisory, who signs off, and what evidence moves the system to the next stage? Gas network AI is entering funded pilots and control rooms, but without published performance data What baseline from leak and incident records will a gas AI pilot be judged against, and what result triggers a go or no-go decision?https://sled.lighthouseadvisory.consulting/streams/utility-management/editions/2026-11-012026-11-03T03:22:10.337Z2026-11-01T00:00:00.000Z

A small edition. Ohio's electric co-ops have organized decades of outage data into a dashboard and say AI may come next, with engineers and lineworkers still making the decisions. Stadtwerke Offenbach in Germany switched on an AI voicebot for routine calls that hands complex cases to staff and warns of early errors. K-Water reports large digital-twin and autonomous-treatment programmes, but its savings figures conflict and do little for cost recovery. A quasi-experimental study of 164 French wastewater plants puts AI aeration savings at 5.4% of electricity, a conservative benchmark. US gas, billing and OT security evidence remained thin for the date.

A small edition. Ohio's electric co-ops have organized decades of outage data into a dashboard and say AI may come next, with engineers and lineworkers still making the decisions. Stadtwerke Offenbach in Germany switched on an AI voicebot for routine calls that hands complex cases to staff and warns of early errors. K-Water reports large digital-twin and autonomous-treatment programmes, but its savings figures conflict and do little for cost recovery. A quasi-experimental study of 164 French wastewater plants puts AI aeration savings at 5.4% of electricity, a conservative benchmark. US gas, billing and OT security evidence remained thin for the date. 4 sources · 2 cross-source patterns Utilities are scoping AI to routine or advisory work and keeping people as the decision point For each proposed AI use, which decisions or call types are in scope, who takes over when the AI is out of scope, and how will that hand-off be measured? Treatment-plant AI savings look smaller under causal measurement than in operator-reported pilots Before committing to AI process control, what baseline, control periods or comparison plants will the utility use to verify savings, and who signs off on the result?https://sled.lighthouseadvisory.consulting/streams/utility-management/editions/2026-10-312026-11-02T01:21:39.264Z2026-10-31T00:00:00.000Z

Tonight's utility AI evidence is early and mostly self-reported, but it fills earlier gaps. Houston Public Works is testing an AI surrogate that turns six-hour stormwater model runs into seconds, and UTEP and El Paso Water are starting NASA-funded AI flood mapping that keeps crews in charge. Seville's EMASESA brings 313,000 smart meters and AI anomaly detection onto one platform. SMUD's board report lists AI fire detection, robot substation inspection, next-generation meters and over 100 staff-built GPT models. Maryland co-op SMECO reports quick wins from document automation but no reliability gain yet from outage prediction. A water-sector insider threat report warns that ungoverned AI agents amplify trusted access. US gas and billing AI evidence remains thin.

Tonight's utility AI evidence is early and mostly self-reported, but it fills earlier gaps. Houston Public Works is testing an AI surrogate that turns six-hour stormwater model runs into seconds, and UTEP and El Paso Water are starting NASA-funded AI flood mapping that keeps crews in charge. Seville's EMASESA brings 313,000 smart meters and AI anomaly detection onto one platform. SMUD's board report lists AI fire detection, robot substation inspection, next-generation meters and over 100 staff-built GPT models. Maryland co-op SMECO reports quick wins from document automation but no reliability gain yet from outage prediction. A water-sector insider threat report warns that ungoverned AI agents amplify trusted access. US gas and billing AI evidence remains thin. 6 sources · 2 cross-source patterns Utility AI is being built on consolidated data platforms first Is the utility's meter, network and model data consolidated and trustworthy enough that an AI tool's output can be checked against it, and who owns that platform? Utilities are keeping AI internal, governed and human-verified while outcomes lag For each AI use, who verifies outputs before action, what access does the tool hold, and what measured result would justify extending it to customers or operations?https://sled.lighthouseadvisory.consulting/streams/utility-management/editions/2026-10-302026-10-31T04:40:39.785Z2026-10-30T00:00:00.000Z

Controls dominate tonight's utility AI evidence. FERC's FY2026 CIP audit lessons name AI tools as an access-control risk inside grid cyber environments and say to inventory them as service accounts, monitor their outbound paths and assess vendor AI under supply-chain rules. A Frenos vendor benchmark finds top models can assemble OT attack plans from supplied context but inconsistently, and could not attack on their own. Utility Dive's sources say few utilities document AI risk processes. On the deployment side, Florida's 32 FMPA members gained joint-purchased AI pole inspection now being used in the Hurricane Isaias response, with vendor-only benefit figures. AWWA tells water communicators to treat LLM output as a draft. A Tanzanian gas pipeline study models careful leak-detection validation. Gas, metering and stormwater evidence remains thin.

Controls dominate tonight's utility AI evidence. FERC's FY2026 CIP audit lessons name AI tools as an access-control risk inside grid cyber environments and say to inventory them as service accounts, monitor their outbound paths and assess vendor AI under supply-chain rules. A Frenos vendor benchmark finds top models can assemble OT attack plans from supplied context but inconsistently, and could not attack on their own. Utility Dive's sources say few utilities document AI risk processes. On the deployment side, Florida's 32 FMPA members gained joint-purchased AI pole inspection now being used in the Hurricane Isaias response, with vendor-only benefit figures. AWWA tells water communicators to treat LLM output as a draft. A Tanzanian gas pipeline study models careful leak-detection validation. Gas, metering and stormwater evidence remains thin. 6 sources · 2 cross-source patterns AI tools are now an access-control problem in utility OT Which AI tools, including vendor-embedded features, can read OT documentation or reach control-system networks today, and does each have an owner, an account record and reviewed access? Utility AI performance claims are running ahead of field validation Before relying on an AI tool, what field-verified test (real events, sampled detections, human fact-checks) will the utility define, and who signs off on the result?https://sled.lighthouseadvisory.consulting/streams/utility-management/editions/2026-10-292026-10-30T03:22:12.375Z2026-10-29T00:00:00.000Z

First utility-management edition. State regulators are moving to inventory utility AI: Connecticut's AG and Consumer Counsel petitioned PURA for a full AI probe, and Arizona's commission held an AI guardrails workshop, echoing Ofwat's UK plan. Readiness evidence from NRECA, Ofwat and AWWA (49% of water respondents lack an AI policy) points to data quality and basic policy as the binding constraints. Deployment evidence is promising but unproven: New Mexico's satellite-AI program found 216 leaks with projected, not measured, savings; Genesee County reports faster condition assessments; Austin signed an AI water MOU with K-water. A UIUC preprint shows AI weather forecasts help pre-storm crew staging only up to about three days. The FBI/EPA PLC attack alert sets the security baseline before AI touches OT.

First utility-management edition. State regulators are moving to inventory utility AI: Connecticut's AG and Consumer Counsel petitioned PURA for a full AI probe, and Arizona's commission held an AI guardrails workshop, echoing Ofwat's UK plan. Readiness evidence from NRECA, Ofwat and AWWA (49% of water respondents lack an AI policy) points to data quality and basic policy as the binding constraints. Deployment evidence is promising but unproven: New Mexico's satellite-AI program found 216 leaks with projected, not measured, savings; Genesee County reports faster condition assessments; Austin signed an AI water MOU with K-water. A UIUC preprint shows AI weather forecasts help pre-storm crew staging only up to about three days. The FBI/EPA PLC attack alert sets the security baseline before AI touches OT. 10 sources · 3 cross-source patterns Regulators are moving to inventory utility AI before setting rules Could the utility produce a complete AI register, including vendor-embedded AI and AMI analytics, with owner, purpose and human-oversight level, if a regulator asked next quarter? Data readiness and basic AI policy are the binding constraints Which single decision would AI support first, and do the identifiers, records and acceptable-use policy behind it meet a minimum readiness bar? Detections and forecast skill are not the same as outcomes What closed-loop measure (verified repair, captured outage burden) will show the AI changed an outcome, and who owns collecting it?