PNGRB updates IT infrastructure guidelines for the CGD sector

Traders Union
All News
Regulators
PNGRB CGD IT guidelines

Highlights

The Petroleum and Natural Gas Regulatory Board updated its IT infrastructure guidelines to account for differences in digital maturity and IT capabilities among CGD entities.
The updated guidelines set minimum requirements for areas such as network connectivity, data management, digital consumer services, cybersecurity obligations and IT governance.
The guidelines encourage entities to strengthen cybersecurity, accelerate digitization, adopt cloud infrastructure and comply with data protection laws.

This article was translated from the original. Read the original version by our correspondent here.

Minimum standards for digital operations

According to the Petroleum and Natural Gas Regulatory Board, the updated guidelines take into account varying levels of digital maturity and IT capabilities among city gas distribution (CGD) entities. Established under the Petroleum and Natural Gas Regulatory Board Act, 2006, the Board is responsible for regulating the uninterrupted supply of petroleum and natural gas across the country.

The guidelines cover key areas such as network connectivity, data management, digital consumer services, cybersecurity obligations and IT governance. They also clarify that regulated entities must comply with the prescribed baseline standards to protect consumer interests and ensure safe and efficient service delivery.

Focus on cybersecurity and compliance

The Board has said that, as digital transformation gathers pace across the sector, reliable IT infrastructure has become increasingly important for consumer services, regulatory reporting and operational security. Given the evolving threat landscape shaped by artificial intelligence, cybersecurity has been given a central place in the guidelines.

The guidelines encourage entities to go beyond baseline standards to improve service quality, accelerate digitization and strengthen compliance with national data protection laws. They also cover additional areas such as the use of cloud infrastructure, business continuity planning and technology lifecycle management, helping entities better manage the complexities of digital operations and regulatory integration.

our earlier report on the growing generative AI/LLM boom highlighted the need for businesses to distinguish between hype and real business value. It noted that adopting AI without a clear strategy, ROI assessment and accountability framework can increase costs, reliability issues, operational challenges and cybersecurity risks. It also recommended prioritizing affordable, regulated solutions tailored to local needs over expensive ‘sovereign LLMs’.

This material may contain third-party opinions, none of the data and information on this webpage constitutes investment advice according to our Disclaimer. While we adhere to strict Editorial Integrity, this post may contain references to products from our partners.