Modifications were made to the compulsory registration order (CRO) for closed-circuit television (CCTV) cameras supplied in India on Monday by the Ministry of Electronics and Information Technology (MeitY). With this modification, all CCTV cameras will need to have their “essential security parameters” tested. On October 9, 2024, the new rule will go into force, giving firms enough time to adjust.
Furthermore, test reports from laboratories recognized by the Bureau of Indian Standards (BIS), like STQC, will be necessary for compliance.
By protecting India’s CCTV cameras from potential threats, this action seeks to protect national security. The rule places a strong emphasis on reliable suppliers of essential parts for CCTV and video surveillance systems.
Furthermore, the revision satisfies a long-standing need from industry bodies such as the Cyber Security Association of India and the TEMA/CMAI Video Security Surveillance Advisory Council of India. It is anticipated to greatly improve national security considerations for all of the nation’s CCTV networks.
This step comes after MeitY’s prior announcement from March 6, 2024. The previous notification covered local content (LC) calculation information and required testing of critical security parameters for CCTV camera procurements by the public.
Furthermore, the certification of trustworthy sources for essential hardware components linked to security operations (such system-on-a-chip, or SOC) is one of the main characteristics of the amendment. It also prohibits the adoption of proprietary network protocols without implementation schedules and source code disclosure.
It’s also essential to limit the use of prohibited C functions and to double-check all programs—including ones downloaded from outside sources—in order to find any potential backdoors.