We have implemented structured data privacy and cybersecurity policies and procedures to safeguard our critical assets from cyber threats, ensuring uninterrupted energy supply, and preventing potential disruptions with significant impacts to the society and economy.
Cybersecurity Governance
Board and its Information Technology and Data Security Committee
Responsible for oversight of cybersecurity strategies and implementation of Data Privacy Policy and Cybersecurity Policy
Chief Information Security Officer (CISO)
Responsible for day-to-day governance of Adani Green's cybersecurity integrity
Approach and Controls
- Our three dimensions of continuous improvement in cybersecurity practices – People, Processes and Technology
- Proactive risk management, in line with NIST Cyber Security Framework (NIST-CSF) and ISO 27001:2013 standards
- Information Security and Cyber Risk Management practices integrated within our Enterprise Risk Management (ERM) Framework
- Cert-In approved Cyber Crisis Management Plan (CCMP)
- Clearly laid down processes to report and address the incidents of breach
- Extensive organisational procedures and technical controls, to minimise cybersecurity incidents
- Cyber Defence Centre for continuous monitoring of cybersecurity system
- Testing of all contingency plans and incident response procedures every six months
- Annual third-party security audits and vulnerability analysis to assess IT system resilience
Cybersecurity Awareness and Initiatives
Implemented ‘MySOPs’ application to facilitate document access for employees, emphasising process efficiency and operational excellence
Integrated information security and cybersecurity behaviour into employee performance evaluations, with disciplinary actions for non-compliance
Quarterly cybersecurity training for all employees, with mandatory trainings for new hires. We covered 100% employees through cybersecurity awareness sessions in FY 2024-25.
Implemented government’s ‘Cyber Swachhta Kendra’ (Botnet Cleaning and Malware Analysis Centre) for a secure cyber environment