Strengthening the Regulatory Framework

The European Union is actively shaping a new regulatory framework to address cybersecurity vulnerabilities and supply chain risks associated with Battery Energy Storage Systems (BESS). As BESS becomes a strategic asset for energy security, the Cybersecurity Act and the newly introduced Industrial Accelerator Act are pivotal in safeguarding the continent's energy infrastructure. Furthermore, the European Commission's Industrial Accelerator Act allows 'Made in EU' and emission criteria in public procurement, directly addressing supply chain dependencies.

Addressing Cloud-Controlled Devices

The Netherlands’ digital infrastructure inspectorate, Rijksinspectie Digitale Infrastructuur, has highlighted significant gaps in current EU cybersecurity rules regarding cloud platforms that remotely control home batteries and energy devices. With the number of heat pumps and EV chargers in the Netherlands growing fivefold since 2019, a sudden supply-and-demand imbalance of 3 gigawatts or more from these devices could severely disrupt the electricity grid.

The inspectorate proposes tying oversight to the amount of controllable power and expanding NIS2 obligations to cover companies capable of endangering grid stability.

Timelines and Compliance

Under the Cyber Resilience Act (CRA), relevant cybersecurity requirements for products with digital elements will apply to products placed on the EU market from December 11, 2027. Meanwhile, a European Commission expert group has recommended classifying solar inverters and batteries as important class II products under the CRA, requiring independent assessment. These measures aim to ensure that the rapid deployment of BESS across Europe does not compromise grid resilience or data security.

Source: Elettrico Magazine, Stormwatt

This article was assisted by AI analysis. Please refer to the original source for official information.