The government has made it mandatory for the testing of essential security parameters with test reports from Bureau of Indian Standards (BIS) and recognized labs such as STQC.
In a bid to address growing concerns over the security implications of Closed-Circuit Television (CCTV) Cameras and related surveillance systems, the Ministry of Electronics and Information Technology (MeitY) has introduced comprehensive security guidelines.
These guidelines, formulated with a keen awareness of the threat of information leakage through CCTV/video surveillance systems (VSS), digital video recorders (DVRs), and network video recorders (NVRs), aim to strengthen national security and ensure the integrity of critical infrastructure.
Under the new guidelines, the government has made it mandatory for the testing of essential security parameters, effective from October 9, 2024, giving the industry sufficient time to prepare itself for compliance. To further ensure adherence to security standards, test reports from Bureau of Indian Standards (BIS) and recognized labs such as STQC will be required.
Key requirements outlined in the guidelines include verification of trusted sources for sourcing critical hardware components related to security functions, prohibition of proprietary network protocols, disclosure of implementation schedules and source code, and verification of all codes, including third-party elements, to prevent the exploitation of potential vulnerabilities.
In December 2023, Electronics For You was the first to report on the existing vulnerabilities in the sourcing of components for security cameras, manufacturing and deployment of CCTV and video surveillance equipment and the possible implications of ignoring these vulnerabilities, listing possible measures and guidelines for the same, which the latest order has incorporated and taken into cognizance.
By implementing these measures, the government aims to guarantee that all CCTV cameras deployed in India meet stringent security criteria and are free from vulnerabilities that could compromise national security.
The move comes in response to long-standing demands from industry bodies such as TEMA/CMAI Video Security Surveillance Advisory Council of India and CSAI- Cyber Security Association of India, highlighting the importance of strengthening national security in surveillance systems.
Prior to this announcement, on March 6, 2024, MeitY issued a notification regarding the public procurement of CCTV cameras, emphasizing the need for essential testing of critical security parameters and providing guidelines for calculating local content (LC) in the devices.
