I dia’s
powe
secto
must
comply
with
ew
cybe secu ity
ules
(AI-ge e ated
image)
NEW
DELHI:
Powe
secto
e tities
will
have
to
e su e
that
se sitive
data,
i cludi g
i fo matio
hosted
o
cloud
platfo ms
a d
histo ical
eco ds,
is
sto ed
i
acco da ce
to
the
ew
cybe secu ity
egulatio s,
amid
g eate
elia ce
o
i te co ected
etwo ks
a d
digital
systems,
a d
the
eed
to
p otect
the
c itical
i f ast uctu e
f om
cybe
th eats.The
powe
secto
faces
pa ticula
isks,
as
a
cybe attack
o
c itical
systems
ca
dis upt
elect icity
ge e atio ,
t a smissio
o
dist ibutio ,
said
a
powe
mi ist y
official,
addi g
the
secto
faced
ea ly
2
lakh
cybe attacks
du i g
Ope atio
Si doo
last
yea ,
but
all
attempts
we e
thwa ted
a d
the
atio al
powe
system
emai ed
ope atio al.The
egulatio s
—
otified
by
Ce t al
Elect icity
Autho ity
(CEA)
—
also
equi e
such
data
to
be
sto ed
i
a
e c ypted,
secu e
a d
p otected
e vi o me t.
The
equi eme t
also
exte ds
to
ve do s,
i cludi g
cloud
se vice
p ovide s,
ha dli g
such
data.Ce t al
Elect icity
Autho ity
(Cybe
Secu ity
i
Powe
Secto )
Regulatio s,
2026,
otified
ece tly
a d
which
will
take
effect
f om
Ap il
1
ext
yea ,
will
cove
e tities
that
ow ,
ope ate
o
ma age
ope atio al
tech ology
(OT)
i f ast uctu e
associated
with
i te co ected
powe
system
alo g
with
IT
i f ast uctu e
physically
o
logically
co ected
to
it.
Fo
ge e ati g
compa ies,
captive
ge e ati g
pla ts
a d
e tities
havi g
e e gy
sto age
systems,
the
egulatio s
will
apply
to
i stallatio s
of
50
MW
a d
above.Govt
had
ea lie
set
up
CSIRT-Powe
at
CEA
i
Ap il
2023
as
a
exte ded
a m
of
CERT-I ,
the
atio al
age cy
fo
espo di g
to
cybe -secu ity
i cide ts,
to
help
utilities
detect,
espo d
to
a d
ma age
cybe
i cide ts.The
ew
egulatio s
equi e
e tities
to
epo t
cybe -secu ity
i cide ts
to
CSIRT-Powe
a d
CERT-I
withi
six
hou s.
A
i cide t
dete mi ed
to
be
cybe
sabotage
i volvi g
c itical
systems
will
have
to
be
epo ted
withi
24
hou s.Powe
secto
o ga isatio s
will
have
to
seg egate
IT
a d
OT
systems
a d
e su e
that
OT
equipme t
a d
se vices
a e
p ocu ed
f om
t usted
sou ces.
Remote
ope atio
of
OT
systems,
whe e
ecessa y,
will
have
to
be
ca ied
out
withi
I dia
th ough
a
dedicated
commu icatio
cha el
isolated
f om
the
i te et.
Joi
co ve satio
All
Comme ts
→
Sha e
you
thoughts
i
the
comme ts
I sightful
Readi g
Developme t
Comme t
Be
espectful
·
TOI
commu ity
guideli es
The
egulatio s
also
equi e
ew
c itical
systems
to
u de go
cybe secu ity
audits,
i cludi g
vul e ability
assessme t
a d
pe et atio
testi g,
befo e
commissio i g.
C itical
a d
high- isk
vul e abilities
fou d
du i g
audits
will
have
to
be
add essed
withi
o e
mo th,
while
medium-
a d
low- isk
vul e abilities
will
have
to
be
add essed
withi
th ee
mo ths.O ga isatio s
will
also
have
to
appoi t
a
chief
i fo matio
secu ity
office
(CISO)
a d
alte ate
CISO,
mai tai
a
24-hou
i fo matio
secu ity
fu ctio ,
co duct
a ual
self-audits
a d
mai tai
cybe – isk
assessme ts,
asset
egiste s
a d
i cide t- espo se
pla s.The
f amewo k
also
ma dates
cybe -secu ity
t ai i g
fo
pe so el
i volved
i
ope ati g
a d
mai tai i g
c itical
systems,
besides
co ti uous
mo ito i g
of
IT
a d
OT
systems
a d
pe iodic
cybe secu ity
exe cises.