Don’t do SECURITY. Do business SECURELY.
Request a consultation
Back to all insights

Brazil’s ANEEL electricity cyber security rule takes effect

Brazil’s ANEEL Normative Resolution 964/2021 now requires electricity sector agents to maintain cyber security policies and report incidents.

Brazil’s ANEEL Normative Resolution 964/2021, setting cyber security requirements for the electricity sector, takes effect today.

Key points

  • Electricity sector agents must adopt a cyber security policy.
  • Incident handling, reporting and information sharing processes are required.
  • Policies must address risk management and business continuity.
  • The rule complements Brazil’s national cyber security strategy.

UK suppliers of operational technology, software and services to Brazilian utilities should expect contractual security requirements and support for incident reporting. Evidence of recognised frameworks, such as ISO/IEC 27001 and IEC 62443, can help suppliers demonstrate that their products and services support customers’ compliance.

Source: ANEEL Normative Resolution 964/2021 (ANEEL)

Need help understanding what this change means for your organisation? Get in touch for a pragmatic, no-obligation conversation.

How we can help: consulting, auditing, and AI governance. Request a complimentary consultation.

More insights