Dominion Energy

In 1951, TC Energy began its journey as TransCanada Corporation with a vision to build essential energy infrastructure that would power North America's growth. From those early days in Calgary, Alberta, the founders recognized something fundamental: reliable energy transportation would be the backbone of economic prosperity across the continent. They set out to create networks that could safely and efficiently deliver the energy people needed - where they needed it, when they needed it. Over seven decades, that initial spark has evolved into one of North America's leading energy infrastructure companies, with operations spanning Canada, the United States and Mexico. Today, TC Energy's 94,000-kilometer natural gas pipeline network delivers more than 25% of the natural gas consumed daily across North America, heating homes, fueling industries and generating power. Beyond pipelines, the company generates approximately 4,650 megawatts of electricity, with over 75% coming from low-carbon sources including nuclear and renewables. The 2019 transformation from TransCanada to TC Energy marked a pivotal moment, better reflecting the company's comprehensive scope and position as a continental energy leader. In 2024, TC Energy completed the strategic spinoff of its Liquids Pipelines business as South Bow, positioning both companies to pursue focused growth strategies while continuing to meet the evolving energy needs of millions of North Americans.

EDF is Britain's biggest generator of zero carbon electricity, producing power from wind, nuclear and solar to supply homes and businesses across the UK. The company operates eight nuclear power stations and maintains an expanding portfolio of 36 wind farms, including two offshore wind farms, alongside solar and battery storage projects. EDF is investing over £5bn annually in Britain, with £15 billion planned for 2026-28 to strengthen energy security and accelerate the transition to net zero, while driving the vision of an Electric Britain through innovative tariffs and low-carbon solutions. Beyond generation, EDF supplies electricity and gas to residential and business customers, offering smart tariffs, electric vehicle charging solutions, heat pumps, and solar panels to help households reduce their carbon footprint. The company is developing major nuclear projects including Hinkley Point C, which will provide low-carbon electricity to meet 7% of UK demand, and Sizewell C. Through research and development programmes spanning nuclear, renewables, digital innovation, and future energy systems, EDF is positioning itself at the forefront of Britain's clean energy transition.

NextEra Energy operates a 76-gigawatt generation portfolio across 49 states and 4 Canadian provinces - nuclear, natural gas, wind, solar, and battery storage at utility scale. The threat surface is straightforward: critical energy infrastructure spanning multiple jurisdictions, legacy industrial control systems co-existing with newer grid-edge tech, and over 16,000 employees accessing operational technology and enterprise IT. The attack model includes nation-state targeting of generation assets, ransomware against grid operations, and supply chain risk across a geographically distributed footprint that includes first-of-their-kind hybrid facilities pairing renewables with storage. The security posture has to account for operational environments running everything from decades-old nuclear plant systems to real-time energy forecasting platforms built on Alteryx, SAP BusinessObjects, and open-source tooling. Engineers and data scientists work across domains - power plant engineering, grid optimization, energy analytics - which means segmentation, identity management, and secure development practices matter as much as physical site security and ICS hardening. The scale creates both complexity and opportunity: 76 GW of generation means any compromise could have grid-level consequences, but it also means resources to build mature programs. Security teams here deal with the full stack: protecting SCADA and DCS environments at generation sites, securing enterprise tools like SharePoint and Access that support planning and operations, and managing third-party risk across a sprawling vendor ecosystem. The company's hybrid facilities and co-located wind-solar-battery projects introduce newer architectures that require different threat modeling than traditional baseload plants. Work involves hardening OT/IT convergence points, incident response planning for energy sector-specific scenarios, and coordinating with NERC CIP compliance frameworks while keeping an eye on evolving grid modernization risks.

Viva Energy Australia operates at the intersection of legacy petroleum infrastructure and an energy sector in transition. The company supplies approximately one quarter of Australia's fuel requirements through its Geelong Refinery, a network of more than 1,350 Shell-branded service stations, and an extensive national supply chain covering refining, importing, blending, and distribution. Led by CEO Scott Wyatt, the company is transforming its Geelong site into what it calls a modern Energy Hub while maintaining critical fuel supply operations that underpin significant portions of Australia's transportation and industrial sectors. The technical surface area here spans petroleum refining operations, fuel logistics and distribution networks, retail point-of-sale systems across more than 1,350 locations, and industrial control systems tied to refinery operations. The company is simultaneously investing in renewable diesel, exploring hydrogen refuelling infrastructure, and developing gas terminal facilities - each expansion adding complexity to an already sprawling operational technology and information technology environment. For security practitioners, this means defending both traditional OT environments at the Geelong Refinery and a distributed retail network, while the company layers on emerging energy infrastructure projects. Viva Energy positions safety as its highest priority alongside environmental stewardship and community engagement, framing its mission as "powering Australia responsibly." The threat model is straightforward: any disruption to refinery operations, supply chain logistics, or retail network availability directly impacts fuel availability for roughly 25% of the Australian market. The technical domains span industrial petroleum products, fuel blending operations, and increasingly, low-carbon fuel alternatives - all requiring distinct security approaches for operational continuity and data integrity across a geographically distributed national operation.

In 2009, Cenovus Energy emerged as an independent company through a strategic split from Encana, designed to separate oil sands and integrated oil operations from the natural gas business. This bold move created a focused Canadian integrated energy company with roots tracing back to the 1880s. Headquartered in Calgary, Alberta, Cenovus was built on a foundation of responsible energy development - maximizing value while prioritizing safety and environmental stewardship. Today, we operate oil and natural gas production facilities across Canada and the Asia Pacific region, alongside upgrading and refining operations. Our journey reflects the evolution of Canadian energy, combining decades of expertise with innovative approaches to meet the world's growing energy needs.

LUMA Energy operates Puerto Rico's entire transmission and distribution infrastructure - 52,000 miles of lines serving 1.5 million customers across the island. Formed in 2021 as a partnership between ATCO and Quanta Services, the company inherited aging grid assets and a disaster recovery mandate worth over $51 billion. The threat model here is clear: hurricane-prone geography, cascading outage risk, and the operational complexity of modernizing critical infrastructure under live-fire conditions. The tech stack reflects that reality - NERC CIP compliance, NIST Cybersecurity Framework alignment, and operational technology layers including ADMS, EMS, and AMI deployments that touch everything from smart meters to distributed generation integration. The cybersecurity surface is broad and consequential. LUMA manages outage response systems, customer-facing digital tools like the Mi LUMA app, and a communications backbone spanning microwave RF, DMR, and cellular wireless networks. Distribution automation and grid modernization initiatives mean more networked endpoints, more attack vectors, and a regulatory environment that doesn't forgive lapses in NERC CIP posture. The workforce includes engineers, lineworkers, and technical specialists navigating both physical and digital resilience challenges - outage management isn't just IT ops, it's life-safety infrastructure with real-time stakes. Scale matters: operations span 165,000 square miles and over 300 jurisdictions, leveraging parent company experience across 100 countries and nearly 50,000 combined employees. The work involves securing operational technology in a high-consequence environment where grid failures have immediate public impact, and where disaster recovery program management intersects directly with cyber resilience planning. This is infrastructure security where the grid, the threat landscape, and the recovery timeline are all moving targets.