CEA Releases Draft Cybersecurity Regulations for the Power Sector

A
admin

Aug 20, 2024

  • 2 min Read
  • Shares
CEA Releases Draft Cybersecurity Regulations for the Power Sector
The Central Electricity Authority (CEA) has issued the draft Central Electricity Authority (Cyber Security in Power Sector) Regulations, 2024, seeking public comments. Released on August 16, 2024, these draft regulations are available on the CEA website and are designed to bolster cybersecurity across India’s power sector.
  • Key Features of the Draft Regulations
    The draft regulations detail the cybersecurity measures required from “Responsible Entities” within the power sector to protect against cyber threats. Responsible Entities include a broad range of power sector organizations such as generating companies, captive plants, renewable energy sources, transmission and distribution licensees, load dispatch centers, energy storage systems, forecasting service providers, traders, and power exchanges, among others.
  • Public Participation Encouraged
    Stakeholders and the public are invited to review the draft and provide feedback. The deadline for submitting feedback is September 10, 2024. Public input will be considered in the finalization of the regulations.
  • Strengthening Cybersecurity in Critical Infrastructure
    This initiative emphasizes the increasing need for robust cybersecurity in critical infrastructure such as the power grid. By implementing these measures, the CEA aims to safeguard the reliability and security of the power supply against potential cyber threats, ensuring continued service to all citizens.
For more information and to access the draft regulations, check here : Draft  Cyber Security in Power Sector Regulations

Other Blogs

Previous
Next
ISO/IEC 27701:2025 Transition: What Organizations Need to Know Blog

ISO/IEC 27701:2025 Transition: What Organizations Need to Know

ISO/IEC 27701 has entered a new phase. Published on 14 October 2025, ISO/IEC 27701:2025 replaces…

Read More
PCI KMO Standard v1.0: What It Means for Payment Security Blog

PCI KMO Standard v1.0: What It Means for Payment Security

Learn what PCI KMO Standard v1.0 covers, who it affects, how it supports PIN and…

Read More
Firewall Ruleset Review: What Your Rules Are Really Allowing Blog

Firewall Ruleset Review: What Your Rules Are Really Allowing

Every firewall does exactly what its rules tell it to do - nothing more. A…

Read More
CEA Cyber Security Regulations 2026: Compliance Guide Blog

CEA Cyber Security Regulations 2026: Compliance Guide

The Central Electricity Authority (Cyber Security in Power Sector) Regulations, 2026 create an auditable cyber…

Read More
Incident Response Planning for Regulated Entities in India Blog

Incident Response Planning for Regulated Entities in India

Every regulated entity has an incident response plan. It sits in a policy document, usually…

Read More
AI Governance and Compliance in Indian Financial Services Blog

AI Governance and Compliance in Indian Financial Services

Indian banks, NBFCs, and insurance companies are deploying AI across credit scoring, fraud detection, customer…

Read More
FAQ: Cloud Compliance Questions From Fintech CTOs Blog

FAQ: Cloud Compliance Questions From Fintech CTOs

Any cloud provider with data center regions in India - AWS (Mumbai and Hyderabad), Azure…

Read More
RBI Cybersecurity Directions 2026: A Complete Compliance Guide Blog

RBI Cybersecurity Directions 2026: A Complete Compliance Guide

RBI's approach to cybersecurity regulation has evolved from advisory circulars to mandatory directions. The regulatory…

Read More

Ready to become compliant?

Talk to QRC to understand your scope, close gaps, and move confidently
toward validation readiness.