New Indian Telecom Security Assurance Requirements for Operating Systems

The Department of Telecommunications (DoT) on July 26, 2024, issued a notice for seeking stakeholder inputs on the DFC (Draft for Comments) of Indian Telecom Security Assurance Requirements (ITSAR) for Operating System (OS).

In a significant move to bolster the security and reliability of telecommunications equipment, the Central Government has amended the Indian Telegraph Rules, 1951. This amendment introduces mandatory testing and certification for all telecom equipment under the new rules (Rule 528 to 537). The Telecom Engineering Centre (TEC) first laid out the Procedure for Mandatory Testing and Certification of Telecommunication Equipment (MTCTE) in December 2017 to implement these rules effectively.

As part of this ongoing effort, the National Centre for Communication Security (NCCS) is taking the lead in defining and enforcing security requirements. The NCCS’s Security Assurance Standards (SAS) vertical is tasked with drafting and finalizing the Indian Telecom Security Assurance Requirements (ITSAR) for various communication equipment, including Operating Systems (OS).

The NCCS is now seeking valuable feedback from all relevant stakeholders. This includes Telecom Service Providers (TSPs), Machine-to-Machine (M2M) service providers, Application Service Providers, device manufacturers, Original Equipment Manufacturers (OEMs), prospective labs, industry bodies, and academic institutions.

An online meeting will be convened to discuss the Draft ITSAR for Operating Systems. This will be a crucial opportunity for stakeholders to contribute their insights and help shape the final requirements.

Public Consultation:

 Stakeholders are encouraged to send their suggestions, comments, and inputs to:

  • Shri. N Janardhan, Director (SAS II), NCCS at dirsas3.nccs-dot@gov.in
  • Ms. Mounika Adepu, ADET-I (SAS-II), NCCS at adet1sasf.nccs-dot@gov.in

Deadline:  August 14, 2024.

RECENT UPDATES