Compliance Command Center

Executive Compliance Command Center

Portfolio posture across the CEA (Cyber Security in Power Sector) Regulations, 2026 — updated continuously from control, risk, audit and evidence records.

Board-ready quarterly pack
74%Portfolio CEA compliance
Across 7 sites · 43 controls tracked
Implemented16
Evidence Valid12
Overdue3
External Dependency3
Not Applicable0
Pending Government Order9
Portfolio heatmap — site × regulation
Site56 OT7 CISO8 Policy9-10 Crisis11-12 Vendor13-14 Audit15 Self-audit
Vindhyachal Thermal Station
Narmada Hydro Complex
Kutch Solar Park
Cauvery Wind Cluster
Thar Battery Storage Facility
Talcher Captive Plant
Corporate Data Center — Bhopal
Critical exposure
10Unpatched critical/high vulnerabilities11Expired / revoked approvals24Assets nearing EOL (< 365 days)18Vulnerabilities missing audit clearance1Overdue risk mitigation plans2Untested backups this cycle3Sites missing 180-day log retention1Unapproved critical remote access requests4Vendors with compliance gaps
Regulatory deadlines
Vulnerability SLA — VUL-004 (Critical)
Risk
Overdue by 2d
Incident created — INC-003 (Anomalous setpoint change)
Security Operations
Overdue by 3h
Sabotage flag — INC-008 (Physical intrusion attempt)
Security Operations
Overdue by 3h
Audit report submitted — AUD-01
Audit & Assurance
2d remaining
New critical system commissioned — Thar BESS
Scope & Registry
5d remaining
Mock drill cadence
Training & Exercises
30d remaining
Cyber asset nearing EOL — CA-014
Change & Patch
40d remaining
CCMP annual exercise
Security Operations
1077h remaining
Compliance trend (12 mo.)
Oct · 61%Sep · 78%
Risk trend — open high/critical (12 mo.)
Oct · 34Sep · 19
Findings ageing (41 total)
9
0-30d
5
31-60d
3
61-90d
2
90d+
Patch ageing (% of assets)
61
Current
24
1 cycle
11
2+ cycles
Coverage
Asset completeness87%
Vendor compliance72%
Training coverage81%