By: Ecofin agency

Morocco is facing a delicate choice between a Russian offer of cybersecurity cooperation and compliance with European rules that apply to critical sectors such as energy. On August 20, Moscow proposed to share expertise with Rabat to help protect its energy infrastructure, even as Morocco works to expand electricity interconnections with Spain.

Russia’s proposal includes data encryption through its GOST system, secure industrial control tools, and monitoring centers able to detect attacks in real time.

At the same time, Morocco is pushing deeper integration into Europe’s power market through two submarine links with Spain, with a combined capacity of 1,400 MW. Commissioned in 1997 and 2006, the links allowed Morocco to supply about 900 MW into Spain’s grid during a blackout in April.

A third 700 MW interconnection is planned at a cost of €156 million (about $169 million). The project is being developed by Spain’s grid operator Redeia and Morocco’s state utility ONEE.

Since October 2024, the EU’s NIS2 directive has required energy operators to adopt strict cybersecurity measures, including reporting any major incident within 24 hours. Failure to comply can trigger fines of up to €10 million ($10.8 million) or 2% of global turnover.

For Morocco, which exported 1.6 TWh of electricity to Spain in 2023, meeting EU standards is essential. But Russian solutions are not recognized in Brussels, raising questions of technical and regulatory compatibility.

The global context underlines the stakes. In Denmark, 22 energy companies were compromised in May 2023, according to SektorCERT, the national cybersecurity center for the energy sector. Across Europe, energy is the second most targeted sector for ransomware attacks, the EU cybersecurity agency ENISA says.

Balancing Russian expertise with EU rules remains a key challenge to protect Morocco’s energy networks and keep its green power export strategy credible.