Cyber Security Regulations in Power Sector – Critical Digital Firewall
CENTRAL ELECTRICITY AUTHORITY
NOTIFICATION
New Delhi, the 31th July, 2026
F. No. CEA-HY-91-19/8/2024-Cyber Security Division.—-Whereas public notices advertising the draft
of the Central Electricity Authority (Cyber Security in Power Sector) Regulations, 2025 were published in six
newspaper dailies, as required by sub-section (3) of section 177 of the Electricity Act, 2003 (36 of 2003) read
with sub-rule (2) of rule 3 of the Electricity (Procedure for Previous Publication) Rules, 2005 for inviting
objections and suggestions from all persons likely to be affected thereby, before the expiry of the period of thirty
days, from the date on which the copies of the said draft regulations were made available to the public;
And whereas copies of the said newspapers containing the public notices and the said draft regulations on
the website of the Central Electricity Authority were made available to the public on 07th October 2025;
And whereas the objections and suggestions received from the public on the said draft regulations were
considered by the Central Electricity Authority;
And whereas Ministry of Electronics and Information Technology has accorded its concurrence to make
these regulations in respect of the Cyber Security for power sector.
Now, therefore, in exercise of the powers conferred by sub-section (1) of section 177 read with clause (c)
of section 73 of the Electricity Act, 2003(36 of 2003), the Central Electricity Authority hereby makes the
following regulations relating to Cyber Security in power sector for ensuring safe and secure operation and
maintenance of electrical plants and electrical lines,
