As cited
Copy frozen at (site build).
ot ics
Nozomi outlines IT and OT security priorities ahead of India’s April 2027 CEA power sector cybersecurity deadline
India's Central Electricity Authority released comprehensive cybersecurity regulations for the power sector, effective April 1, 2027, that mandate asset visibility, monitoring, governance, and incident response across both IT and operational technology (OT) environments. The framework applies to generation, transmission, distribution, and related entities, along with their vendors and service providers. Nozomi Networks outlined a five-phase roadmap covering assessment, governance establishment, visibility enhancement, operational strengthening, and compliance validation to help power operators meet the deadline.
Why it matters: Power sector operators in India must designate a CISO, establish an information security division, implement OT-IT segregation, and maintain comprehensive asset registers by April 1, 2027, or face regulatory non-compliance; vendors and service providers face new supply chain security requirements and must integrate cybersecurity into service agreements.
- Source published
- First seen by Cybersecurity Tracker