By Sadananda Mohapatra, Senior Business Journalist
India’s Renewable Energy Boom Has Created a New Cybersecurity Problem
India’s power grid has never been greener. It has also never had more entry points for a cyberattack.
That is the tension sitting behind the Central Electricity Authority’s freshly revised cybersecurity guidelines for the power sector, circulated earlier this month. The rules extend mandatory cybersecurity requirements beyond large thermal plants and grid control rooms into the distributed, digitally connected world of renewable energy. The timing is not coincidental. It is a direct response to where India’s electricity now comes from.India has crossed 300 gigawatts of non-fossil fuel installed capacity, more than half of the country’s total installed base of around 552 gigawatts. Solar alone accounts for over 164 gigawatts, spread across utility-scale parks, captive installations and millions of rooftop systems connected to the grid through digital inverters. Each of those inverters communicates with a control system. Each storage unit can be remotely monitored. Each digital substation can be operated through software supplied by a third party. The grid that was once a chain of large, physically secured power stations is now a network of thousands of smaller, digitally connected nodes.
Every additional connection is a potential entry point.
The old cybersecurity model assumed the threat was concentrated at the top of the system: the large coal or gas plant, the regional load dispatch centre, the high-voltage transmission network. Protect those nodes and the grid is broadly secure. That assumption made sense when coal-fired generation dominated the installed base. It does not hold when distributed renewable capacity is growing faster than any other segment of the power system.
The revised guidelines respond to this shift directly. Mandatory cybersecurity requirements now apply to generating companies, captive plants and energy storage systems from 50 megawatts upward. Distributed generation resources including grid-connected rooftop solar are brought into the framework with baseline control requirements even where full mandatory compliance does not apply. Vendors supplying hardware, software, communication systems and monitoring equipment to the power sector now carry their own cybersecurity obligations, recognising that third-party software inside critical infrastructure is a systemic risk, not just an operational one.
Covered entities must appoint senior cybersecurity officers, maintain crisis management plans, conduct regular audits and report incidents within six hours.
The broader message from the CEA is straightforward. India built its renewable capacity at speed. The cybersecurity framework is now catching up with what that speed created: a greener grid that is also a more distributed, more connected and more exposed one.
Joules Capsule: Weekly Round-Up
India Auctions 1,500 MW of Firm Renewable Power With Storage
India’s Solar Energy Corporation of India has concluded an auction for 1,500 megawatts of firm and dispatchable renewable energy backed by four hours of assured battery storage. Three companies won allocations: Waaree Forever Energies secured 700 megawatts at Rs 5.99 per unit, state-owned NTPC Renewable Energy took 500 megawatts at Rs 6 per unit, and ACME Solar won 300 megawatts at Rs 6 per unit. The auction is significant because it prices round-the-clock renewable supply at a level that begins to compete with conventional peaking power, directly addressing the evening grid stress that has defined India’s summer of 2026.
India Clears Rs 7,000 Crore LPG Pipeline to Accelerate Cooking Gas Shift
The government has cleared a Rs 7,000 crore (approximately USD 840 million) LPG pipeline expansion covering six states, the latest in a series of infrastructure moves to reduce dependence on imported cylinder supply disrupted by the West Asia crisis. The Centre is simultaneously pushing states to accelerate the transition from cylinders to piped natural gas, with district-level officers being appointed specifically to manage the LPG-to-PNG switchover. Assam has also brought its new Hydrocarbon Policy into force, opening the state’s oil and gas sector to fresh investment under a streamlined framework welcomed by the Petroleum Ministry.
India’s Grid Storage Pipeline Keeps Growing
Beyond the firm power auction, India’s grid-scale storage build-out is advancing on multiple fronts. Power Grid Corporation has tendered 530 megawatt-hours of battery storage in Haryana. Eleven pumped hydro storage projects totalling approximately 15.9 gigawatts are under active construction nationally. Telangana is considering procuring around 2,545 megawatts of additional solar capacity. The combined picture points to a power sector that is beginning to address the evening supply gap that record summer demand exposed, though the pace of storage deployment still trails the pace of renewable generation additions by a considerable margin.
About the Author:
Sadananda Mohapatra is a veteran business journalist with decades of experience covering India’s emergy, industry, and economic landscape. With stints at reputed financial news publications like The Business Standard & NewsWire18, he reported extensively on India’s power sector, minerals policy, coal and energy regulation, and industrial developments — building a deep, ground-level understanding of the global energy economy. His work spans corporate affairs, infrastructure, and policy analysis, with a particular focus on eastern India’s resource-rich industrial corridor. He currently writes on the global energy landscape through his newsletter, The Joule’s Stack.
