Utilities that demonstrate implementation of core cybersecurity practices across information technology and operational technology capabilities, governance practices, workforce preparation, incident response processes, and risk management activities that support reliable and resilient operations are honored with APPA's Cybersecurity Accelerator Program designation.
Utilities may receive a two-year Gold, Platinum, or Diamond designation based on their overall score on the CAP assessment and size. Each level reflects a progressively stronger demonstration of cybersecurity program maturity within the applicable utility size category.
Public power utilities holding the 2026 CAP designation include:
Diamond Level
| SMALL |
| Coldwater Board of Public Utilities, Michigan |
| Stowe Electric Department, Vermont |
| Vernon Public Utilities, California |
| MEDIUM |
| Beaches Energy Services, Florida |
| City of College Station, Texas |
| Grand Haven Board of Light & Power, Michigan |
| LARGE |
| City Utilities of Springfield, Missouri |
Platinum Level
| SMALL |
| Clear River Electric & Water District, Rhode Island |
| Hannibal Board of Public Works, Missouri |
| Littleton Electric Light & Water Departments, Massachusetts |
| Zeeland Board of Public Works, Michigan |
| MEDIUM |
| City of New Bern, North Carolina |
| Cleveland Utilities, Tennessee |
| Cowlitz PUD, Washington |
| Holland Board of Public Works, Michigan |
| Northern Wasco County People's Utility District, Oregon |
| Peabody Municipal Light Plant, Massachusetts |
| Riviera Utilities, Alabama |
| Wisconsin Rapids Water Works & Lighting Commission, Wisconsin |
| LARGE |
| Greenville Utilities Commission, North Carolina |
| Kansas City Board of Public Utilities, Kansas |
| Nashville Electric Service, Tennessee |
| Snohomish County PUD, Washington |
Gold Level
| SMALL |
| Hudson Light and Power Department, Massachusetts |
| MEDIUM |
| Brownsville Public Utilities Board, Texas |
| Central Coast Community Energy, California |
| City of Fountain Utilities, Colorado |
| Easton Utilities Commission, Maryland |
| Guam Power Authority, Guam |
| LARGE |
| Missouri Public Utility Alliance, Missouri |
| Roseville Electric, California |
| Southern Minnesota Municipal Power Agency, Minnesota |
CAP is designed not only to recognize utilities that demonstrate strong cybersecurity practices, but also to help utilities better understand and communicate their current capabilities, identify opportunities for improvement, prioritize future investments, and measure progress over time. Learn more about the program.