March 26, 2025
Kolkata

In a landmark achievement, Damodar Valley Corporation (DVC) has successfully attained the ISO/IEC 27001:2022 certification, a globally acclaimed standard for Information Security Management Systems (ISMS). This certification encompasses all seven of DVC's business verticals, including DVC-THERMAL, DVC-HYDEL, DVC-IT, DVC-TRANSMISSION, DVC-DISTRIBUTION, DVC-RENEWABLE, and DVC-SLDC. Notably, this marks the first time in India that an organization within the critical power sector has achieved ISO/IEC 27001:2022 certification across all its verticals simultaneously.

The accomplishment is the result of collaborative efforts between DVC and C-DAC, with teams from Kolkata, Hyderabad, and Bangalore playing pivotal roles. The C-DAC team from Kolkata spearheaded ISMS policy creation, internal audits, security consultancy, web/IT vulnerability assessment and penetration testing (VAPT), and project management. Meanwhile, the Hyderabad team contributed expertise in IT VAPT and project management, and the Bangalore team focused on operational technology (OT) VAPT.

Shri Suresh Kumar, Chairman of DVC, and Shri Manohar Ismail, Chief Information Security Officer (CISO) of DVC, expressed their gratitude to C-DAC for their instrumental role in achieving this milestone. This certification not only underscores DVC's commitment to implementing a robust information security framework but also highlights C-DAC's capabilities as a trusted ISMS consultant for critical sectors in India.

The ISO/IEC 27001:2022 certification reinforces DVC's security posture, ensuring the organization is well-equipped to address evolving cybersecurity challenges, protect sensitive data, and manage risks effectively within the energy sector. By adopting this globally recognized standard, DVC has set a benchmark for information security practices in India's power industry.

Under the leadership of Dr. CH A S Murty, Centre-Head of C-DAC Kolkata, the implementation process was meticulously guided by a dedicated team. Key contributors included Shri. Anupam Chanda Scientist E, Shri. Kousik Maiti Scientist E, and other team members such as Shri. Abhijit Chatterjee, Shri. Aniruddha Datta, Shri. Sanjeev Kumar, Shri.Shabdik Chakraborty, and Shri.Shubhadeep Ghosh. The team provided end-to-end support, from the inception of the ISMS framework to its successful certification, conducting multiple cycles of internal audits across DVC's operations. Additionally, the C-DAC Kolkata team was deputed at DVC's headquarters to oversee ISMS activities, IT/OT security audits, and web security assessments across all DVC plants.

This milestone not only reflects DVC's dedication to maintaining the highest standards of information security but also positions C-DAC as a leader in delivering specialized ISMS consultancy services to critical infrastructure sectors in India.

ISO 27001:2022 Certificate handed over to Chairman DVC

ISO 27001:2022 Certificate ceremony with CISO DVC along with DVC & C-DAC members