At WEFTEC, new water-control hardware brings cybersecurity into the upgrade decision

Schneider Electric used WEFTEC in New Orleans to announce cybersecurity enhancements for its Modicon industrial-control platform on September 28, 2026. The release puts the security of plant controls alongside the more familiar aims of water-system upgrades: keeping equipment operating and managing energy use.

In its company announcement, Schneider described encrypted firmware, network authentication and access permissions based on user roles. The changes cover M580 controllers, related communication hardware, Ethernet switches and distributed input/output equipment.

The company says the release’s automation architecture is certified to IEC 62443-3-3 Security Level 2. That is a vendor statement about the specified architecture, not evidence that every water plant using one of its components meets the same security level.

The exhibition also includes software-defined automation, motor controls, variable-speed drives and water-management analytics. The event runs September 26–30. No independently measured savings or reduction in cyber incidents from the newly announced release is established in the materials reviewed.

The operating problem behind the equipment

The EPA’s February 6, 2026 account of its cybersecurity work provides context. The agency said it identified vulnerabilities at 277 water systems during 2025 and helped address problems involving authentication, access controls and other technical settings.

EPA’s basic measures include keeping operational equipment off the public-facing internet where appropriate, maintaining an inventory of assets and strengthening authentication, including multifactor authentication. The agency also offers assessments and technical assistance.

These are operating practices, not simply items in a hardware specification. A new controller can offer stronger access controls while the utility still has to decide who receives access, how accounts are removed and who maintains the configuration.

What changes in a plant upgrade

The infrastructure implication is that control-system procurement and operating responsibility increasingly belong in the same discussion. A purchase can introduce useful capabilities without resolving how those capabilities will be managed through maintenance, staffing changes and later software updates.

For a utility evaluating the announcement, a demonstration establishes what a product is intended to do. Evidence from the proposed installation is still needed to establish compatibility, operating procedures and acceptance criteria. The distinction is especially relevant where new controls must work with equipment that remains in service.

Schneider’s release is a current product announcement. EPA’s earlier findings explain the wider operating context; they are not an endorsement of this vendor or evidence of performance at a named utility.

Sources reviewed September 29, 2026. Silicon Valley Clean Water treatment plant, Redwood City, September 2023; representative photograph. Photo: Pi.1415926535 / CC BY-SA 4.0. No editorial alterations; WordPress may resize or crop for display. This photograph shows Redwood City, California, not a named project in this article. Display adaptations remain under CC BY-SA 4.0.