Cyber Security and Data Privacy

As the energy ecosystem becomes more digital and interconnected, the resilience and security of information assets have become fundamental to reliable operations and energy security. At AGEL, power generation facilities, transmission networks, and comprehensive data management platforms operate through integrated digital systems. This makes cybersecurity and data protection a strategic priority to ensure uninterrupted operations and safeguard our digital infrastructure.

AGEL Security Operations Centre / control room

AGEL’s Approach to Cybersecurity and Data Protection

Adoption of secure digital platforms for portfolio monitoring, compliance tracking, and document management.

Implementation of AI-driven analytics for investment insights and risk alerts.

Cybersecurity protocols aligned with global standards to protect sensitive family and financial data.

Governance and Oversight

Foundational Framework

Board-Approved Policies and Procedures
  • Dedicated Data Privacy Policy and Cyber Security Policy
  • NIST 800-37 & ISO 27701:2022-aligned risk management
  • Integration of cyber security risks Enterprise Risk Management (ERM) framework
  • Detective and preventive controls to strengthen cybersecurity infrastructure
  • CERT-In approved Cyber Crisis Management Plan (CCMP) for swift response to any incidents
Certified Systems and Global Standards
  • NIST-CISF and IEC 62443–aligned Cyber Security Framework
  • ISO 27001:2022 (Information Security Management Systems)

Oversight and Accountability

Board-Level

Information Technology and Data Security Committee (IT&DS)

  • Provides strategic direction and oversight to our cybersecurity and data protection practices at the top-level
Executive Management Level

Chief Information Security Officer, CISO

  • Leads the daily governance of our cybersecurity framework, ensuring the resilience of both IT and OT systems

Audits, Assurance and Compliance

  • Internal audits and third-party assurance to validate policies and controls
  • CEA (Central Electricity Authority), Cyber Security Compliance

Engagement and Awareness

We foster strong cybersecurity culture by equipping our people to act as the first line of defence. Key initiatives include:

  • Quarterly training for all employees on evolving threats and safe digital practices
  • Mandatory cybersecurity e-learning modules for all-new hires during onboarding
  • Specialised training for the Board members on emerging risks and their responsibilities
  • Monthly simulated phishing emails sent to all employees
  • Integration of cybersecurity compliance into employee performance evaluations and compensation
100%

of employees covered through cybersecurity awareness sessions in FY 2025-26