Power Sector Cyber Security: India Plans New Framework Against Threats

The Centre is introducing new cyber security regulations for India's power sector, drafted by the Central Electricity Authority (CEA), to take effect from April 2026. This follows thwarted attacks during India-Pakistan tensions in May 2025, emphasizing protection against threats to digitized grids.

The rules cover all grid-connected entities, including renewables, vendors, and service providers, requiring board-approved policies, a Chief Information Security Officer (CISO), and alignment with NCIIPC and Power Ministry standards. They mandate encryption, access control, logging, and supply-chain security to prevent disruptions.

This framework addresses OT/IT convergence and vulnerabilities in smart systems, ensuring resilient defense for critical infrastructure.

NPAV offers a robust solution to combat cyber fraud. Protect yourself with our top-tier security product, Z Plus Security