Adequacy and Limitations of the Information Technology Act in Addressing Cyber-Security Issues of Indian Power Systems

Worldwide power grids are being modernized with the help of computer technology. India is not an exception. Though the increasing use of computer and computer system has improved the performance of the Indian power grid, it has brought new challenges. Digital protection, monitoring and metering devices have significant connectivity with the cyber world. As a result, Indian power grid has become potential target of cyber criminals. Possibility of a cyber attack on Indian Power Grid is a reality and an imminent threat. From the energy policy point of view, it is important to ensure that the Indian laws adequately address such possible attacks on Indian power grid. In India, Information Technology Act 2000/2008 (IT Act) is the current law that is specifically meant to address the issue of Cyber Space and Crimes. As a result, any cyber attack or cyber crime in Indian power grid will be tested against the provisions of IT Act 2000/2008. This paper examines the adequacy and limitations of the provisions of the IT Act 2000/2008 in addressing cyber security issues of Indian power grid. It is found that appropriate amendments are required to address the limitations of the IT Act 2000/2008 in tackling cyber threats in Indian power grid.