About
ComSec Scheme in India is a vital government program under the Department of Telecommunications (DoT), implemented and managed by the National Centre for Communication Security (NCCS).
 
Key aspects of the Communication Security Certification Scheme:
Objective:

• To develop country-specific security standards Indian Telecom Security Assurance Requirements (ITSARs).
• Establish a robust testing and certification ecosystem to ensure telecom equipment meets security assurance requirements.
• This protects Indian telecom networks from cyber threats, espionage, and vulnerabilities.

Scope:

• The scheme applies to all telecom equipment that is sold, imported, or used in India and connected to Indian telecom networks.
• Equipment categories cover include but are not limited to Wi-Fi CPE, IP routers, broadband modems, and other network elements.
• The scheme is part of the broader framework of Mandatory Testing and Certification of Telecom Equipment (MTCTE).

Implementation Structure:

• NCCS acts as the scheme administrator with three main divisions: Security Assurance Standards (development of ITSARs), Security Lab Recognition/Designation (designation of Telecom Security Test Laboratories or TSTLs), and Security Certification (evaluation and certification).
• The Head of NCCS serves as the Scheme Controller overseeing overall implementation, and any disputes are resolved within this framework.

Testing and Certification:

• Telecom equipment must be tested at designated and certified third-party Telecom Security Test Laboratories (TSTLs) according to ITSARs.
• Upon successful testing, NCCS issues a security certificate validating compliance.
• The certificate is typically valid for ten years, with conditions for suspension or cancellation if needed.

Mandatory Compliance Timeline: For example, all Wi-Fi CPE and IP routers require ComSec certification from July 1, 2024. The process extends to other equipment progressively.
 
Legal Backing: The scheme is supported by amended Indian Telegraph Rules (2017) mandating this certification before telecom equipment can be sold, imported, or deployed.
 
Facilities and Infrastructure: NCCS has established a dedicated Security Assurance Standards Facility with laboratories and testing infrastructure to support certification processes.
 
Communication Security Certification Scheme is a comprehensive, government-mandated program to enforce telecom equipment security through rigorous testing and certification, regulated by the NCCS, essential for protecting India's digital infrastructure.

Download Pdf