The Central Electricity Authority (CEA) has released draft regulations for public comment on cyber security. These regulations, called the Central Electricity Authority (Cyber Security in Power Sector) Regulations, 2024, are available for download on the CEA website. A public notice of these draft regulations was issued on August 16, 2024.
These draft regulations aim to strengthen cybersecurity in the Indian power sector. The draft regulations outline measures to be taken by “Responsible Entities” in the power sector to safeguard against cyber threats. The draft regulations define Responsible Entities to include power sector entities deploying Operational Technologies with or without IT systems including:
- generating companies including
- captive plants,
- Renewable Energy Sources,
- Energy Storage System,
- Transmission Licensees including
- deemed transmission licensee,
- National Load Dispatch Centre,
- Distribution Licensees,
- Regional Load Dispatch Centers,
- State Load Dispatch Centers,
- Control Centers of distribution licensee,
- Central Transmission Utility,
- State Transmission Utilities, and
- Renewable Energy Management Centers,
- forecasting service provider,
- Traders,
- Power Exchanges,
- Qualified Coordinating Agencies.
The public can submit feedback on the proposed regulations through two methods:
- Online: Comments can be emailed to celegal-cea@gov.in.
- By post: Written comments can be submitted at the office of Chief Engineer (Legal), Sewa Bhawan (North Wing), Room No. 622, 6th Floor, R. K. Puram, New Delhi-110066 on any working day between 11:00 AM and 4:00 PM
The deadline for submitting feedback is September 10, 2024. Public input will be considered before finalizing the regulations.
This initiative by the CEA highlights the growing importance of cybersecurity in critical infrastructure like the power grid. By implementing robust cybersecurity measures, the CEA aims to ensure the reliability and security of the power supply for all citizens.
