For most of its history, the solar industry has been measured on output: capacity factors, yield ratios and availability metrics. However, a second scorecard is now emerging alongside energy yield; one that asks operators to prove their assets are governed, monitored and resilient. For many, particularly those operating at scale, that is proving far harder to answer than expected.
A sector that can no longer fly under the radar
The solar sector’s rapid digitalisation has brought with it a risk profile that is only now being fully understood.
Modern utility-scale and commercial solar assets are no longer isolated generation units. They are networked systems: inverters communicating via cloud platforms, SCADA systems integrated with corporate IT networks, BESS units connected to remote monitoring portals and OEM vendor pathways providing permanent remote access into operational environments. Each connection introduces additional cybersecurity and supply-chain dependency that operators must now actively govern.
That dependency on OEM connectivity and foreign-manufactured hardware is fuelling growing concern about supply chain integrity. In 2025, undocumented communication devices were identified in certain Chinese-manufactured inverter equipment, triggering investigations and political scrutiny on both sides of the Atlantic and forcing the industry to confront a question it had largely avoided: how much do operators actually know about what is running inside their assets?
Download full article