The Solar Energy Corporation of India Limited (SECI) has issued a Request for Empanelment (RfE) to create a panel of experienced cybersecurity auditing organizations for India’s renewable energy sector. The initiative is aimed at strengthening cybersecurity practices and ensuring regular and independent audits of Information Technology (IT) and Operational Technology (OT) systems used by renewable energy projects.
SECI is the designated Sectoral Computer Emergency Response Team for Renewable Energy (CERT-RE) under the Ministry of New and Renewable Energy. Through the empanelment process, SECI plans to support renewable energy entities in meeting the requirements of the Central Electricity Authority Cyber Security Regulations, 2024.
The RfE, issued on August 28, 2026, is identified as RfE No. SECI/C&P/EOI/17/0004/26-27, with ISN-ETS Search Code SECI-2026-TN000025. The bidding process will be conducted through a single-stage, single-envelope competitive e-tendering system on the ISN-ETS portal.
The initial empanelment period will be two years. SECI may extend the empanelment for up to two additional years, with yearly extensions subject to satisfactory performance and continued validity of the auditor’s CERT-In empanelment.
Applicants are required to pay a non-refundable bid processing fee of ₹5,000 plus applicable GST. However, Micro and Small Enterprises with valid UDYAM registration are exempt from this fee. Selected agencies will have to pay an empanelment fee of ₹20,000 plus 18% GST for each geographic zone for the initial two-year period. If extended, an annual fee of ₹10,000 plus 18% GST per zone will apply. No Earnest Money Deposit or Performance Bank Guarantee is required under the RfE.
SECI will evaluate applications under a Quality Based Selection system. Organizations must score at least 70 out of 100 marks to qualify. The evaluation will consider auditing experience, certified technical manpower, previous cybersecurity audits, ISO certifications such as ISO/IEC 27001, and expertise in OT systems including SCADA, DCS and Substation Automation Systems.
Empaneled agencies will be deployed across five geographic zones. Specific audit assignments will be awarded through secondary competitive price bids based on L1 selection. Payments will be made in two equal instalments, with 50% released after submission of the initial audit report and the remaining 50% after final compliance sign-off.
The bid validity period is 12 months from the last date of submission. Bidders can report discrepancies in the RfE document within 20 days of its issuance.
Subscribe to get the latest posts sent to your email.
