Cybersecurity Guidelines for Power Sector

Table of Contents

Relevance

GS 2: Government policies and interventions for development in various sectors and issues arising out of their design and implementation.

Ministry of Power has recently released a new cybersecurity guideline for power sector to create a secure power cyber ecosystem.

The guideline on cyber security in are to be adhered by all Power Sector utilities to create cyber-secure eco-system.
It is the first time that a comprehensive guideline has been formulated on cyber security in the power sector.
The guideline lays down required actions for cyber security preparedness across various utilities.
It lays down a cyber assurance framework, strengthens the regulatory framework, puts in place mechanisms for security threat early warning, vulnerability management and response to security threats, and secures remote operations and services, among others.
The guidelines mandate ICT-based procurement from identified ‘trusted sources’ and ‘trusted products’ or else the product has to be tested for malware/ hardware trojan before deployment for use in the power supply system network.

The norms are applicable to all responsible entities as well as system integrators, equipment manufacturers, suppliers/ vendors, service providers, and IT hardware and software OEMs (original equipment manufacturers) engaged in the Indian power supply system.

It will promote research and development in cybersecurity and open up the market for setting up cyber testing infra in public as well as private sectors in the country.

Cyber intrusion attempts and Cyber-attacks in power sector either compromises the power supply system or to render the grid operation in-secure.
Any such compromise, may result in maloperations of equipment, equipment damages or even in a cascading grid brownout/blackout.