NEW DELHI: The government is considering expanding its cybersecurity efforts beyond CCTV cameras by introducing a similar regulatory framework for a wide range of Internet of Things (IoT) devices, including smart meters, amid concerns that such devices could remain vulnerable as they are imported, mainly from China.Although a final decision has not been taken yet, discussions at the official level are underway on measures that may require connected devices to meet stricter security and certification standards before they can be sold in India. The move is aimed at reducing cyber vulnerabilities in internet-connected products and should not be seen as a proposal to ban any category of devices, people familiar with the matter said.The deliberations come in the wake of the government’s decision to mandate security certification for Internet-enabled CCTV cameras under the Standardization Testing and Quality Certification (STQC) framework.Since April 1, manufacturers whose products do not comply with the stipulated basic security requirements have been banned from selling connected CCTV cameras in India.
The same concerns increasingly apply across the broader IoT ecosystem, which includes smart meters, home automation products, connected devices, industrial sensors, wearable devices, healthcare equipment and other Internet-enabled products, officials said.
As these devices grow across homes, factories, offices and critical infrastructure, they also create much larger attack points for hackers if security standards are weak or inconsistent.The government is examining whether the Common Core Security Framework can ensure that connected devices entering the Indian market meet minimum cybersecurity requirements before deployment, people familiar with the discussions said. The focus is expected to be on product testing, vulnerability assessment, software integrity, and increasing visibility into supply chains.The focus is on ensuring that connected products meet India’s cybersecurity requirements regardless of where they are manufactured.