India Calls for Strengthened Cybersecurity in Wind Sector to Counter Threats

India must enhance its security measures to protect national infrastructure from cybersecurity threats linked to wind sector component imports, especially from China, according to Niti Aayog. The report, titled "Domestic Manufacturing Capacity & Potential Cyber Security Challenges in the Wind Sector and Way Forward," highlights the risks posed by wind turbines' ability to exchange information through power plant controllers (PPC).

Representative image

The PPC software is crucial and carries risks since it connects wind farms directly to national or state grids. The report suggests that PPC original equipment manufacturers (OEMs) of foreign origin, particularly from neighbouring countries, should be scrutinised and potentially suspended if they do not adhere to protocols. This is vital as cyberattacks on wind turbines could compromise grid operations, especially when managed remotely by owners outside India.

Cybersecurity Concerns in Wind Sector

China has emerged as a significant competitor in wind equipment exports, raising concerns about cybersecurity due to the import of wind sector components by OEMs. The report points out that OEMs' data collection servers are often located outside the country, creating vulnerabilities in data and power system network operations. These vulnerabilities are exacerbated when OEMs update operating software of wind plant devices without permission from grid operators or the Ministry of New and Renewable Energy (MNRE).

The central government has provided incentives like the Remission of Duties and Taxes on Export Products (RoDTEP) scheme. However, challenges remain, such as exclusion from the Advance Authorization scheme and increased manufacturing costs. The report recommends certification and approval of all intellectual property rights (IPRs), software, and hardware from foreign-origin OEMs by the Central Electricity Authority of India (CEA), Ministry of Electronics and Information Technology (MeitY), and Standardization Testing and Quality Certification (STQC).

Recommendations for Enhanced Security

All OEMs in the wind sector should locate their data centres and research & development centres within India. Failure to do so should result in their exclusion from participating in tenders and supplying items in the country. The MNRE should establish timelines for relocating these centres within India. Additionally, every utility must appoint a Chief Information Security Officer (CISO) who resides in India and reports compliance to a proposed independent agency overseeing power sector cybersecurity.

As of 2022, the global wind energy sector achieved a cumulative installed capacity of 906 GW, marking a 9% year-on-year increase. India has emerged as a key player, ranking fourth globally in installed wind power capacity. This positions India as a leader in South Asia's wind energy sector, driven largely by its indigenous wind power manufacturing industry.

India's Role in Global Wind Energy

Despite its significant potential, only 6% of India's assessed wind energy capacity has been realised, indicating substantial room for growth. The National Institute of Wind Energy highlights this potential. However, competition with China remains intense, with China holding a 61% share of global wind turbine assembly capacity.

The report underscores the importance of robust security measures to protect national infrastructure amid these cybersecurity concerns. It emphasises that safeguarding against cyber threats is crucial for maintaining grid stability and achieving India's ambitious targets for non-fossil fuel capacity and net-zero emissions by 2030 and 2070.

India's strategic position in the global wind energy market necessitates stringent security protocols to mitigate risks associated with foreign-origin components. Ensuring compliance with these measures will be vital for sustaining growth and securing India's energy infrastructure.