Electric cooperatives can sharpen their cyber defenses through an NRECA-led online tabletop exercise on Oct. 15 that tailors the experience to each co-op’s level of cyber preparedness and provides new artificial intelligence tools to build their own drills.

Co-ops can register for Guardian: Under Siege in one of five cyber-maturity categories developed by NRECA’s Project Guardian. The categories span from co-ops with basic practices to those with established cyber cultures and advanced tools.

“All our co-ops are so diverse. Every one of them is at a different point in their cybersecurity journey,” said Carter Manucy, NRECA senior director of cybersecurity. “With Under Siege, we want to meet co-ops where they are and support their progress along the way.”

The goal is to help co-ops engage at the level that fits them best, so they can recognize gaps, build confidence and continue making steady progress, added Justin Luebbert, NRECA senior manager for cybersecurity.

“It’s really not about perfection; it’s about confidence and building that next level of maturity,” said Luebbert. “This is really to help co-ops grow and mature over time.”

Under Siege will feature Project Guardian’s “Cold Call” scenario, where co-ops work through realistic evidence of a possible data exposure to practice confirming facts, coordinating across departments and deciding what actions to take next.

AI-generated prompts and materials will add realism to the exercise, helping co-ops work through a more lifelike and challenging cybersecurity scenario.

Afterward, co-ops can obtain AI prompt files and text documents to develop exercises tailored to their vulnerabilities.

NRECA’s cybersecurity team will facilitate the two-and-a-half-hour exercise virtually so that co-ops can convene a variety of employees, including senior executives, legal counsel, human resources and communications.

"The true value of a tabletop exercise isn't just testing plans, it's bringing different departments together to understand their ownership, dependencies and decision-making responsibilities before a real incident occurs," said Luebbert.

Under Siege debuted as a webinar in April when more than 320 co-ops gathered for one large session without the added value of AI materials or cyber maturity categorization.

The October drill will allow co-ops to gain more precise experience interacting and coordinating their workforce as they confront real-world cybercriminal tactics, said Ryan Newlon, NRECA principal for cybersecurity solutions.

“Categorization helps us develop solutions that directly address their specific needs, challenges and growth opportunities," Newlon said. “By self-identifying, co-ops choose their own cybersecurity adventure and learn to achieve goals on their own.”

To help co-ops prepare for the exercise, NRECA is offering a Know Before You Go guide and other resources, including cyber incident response plan templates and maturity category information.

The exercise has been made possible by NRECA’s Project Guardian, which received $4 million in 2024 from the Department of Energy’s Rural and Municipal Utility Advanced Cybersecurity Grant and Technical Assistance (RMUC) Program. NRECA plans to hold two Under Siege drills next year and in 2028.

“We really want our members to move up that categorization ladder,” said Manucy. “The goal is steady progress—helping members better understand their cybersecurity posture, use the resources available to them and take action at a pace that fits their organization.”