TEC Notification 2024 | Cloud-Based Network Devices Exempt from Security Certification

Introduction to the TEC update on Exemption from Security Certification

The Department of Telecommunications (DoT), under the Ministry of Communications, Government of India, has recently issued an Office Memorandum providing temporary regulatory relief to stakeholders who are dealing with cloud-based telecom equipment. This notification is basically addressed to OEMs, applicants, as well as participants under the telecom security certification framework and clarifies the status of security certification requirements under the ComSec scheme.

The clarification mainly aims to address industry concerns that are related to evolving cloud-based network architectures and their integration into India’s telecom ecosystem.

Key Changes You Should Know

As per the Office Memorandum that has been issued by DoT, the following categories of telecom equipment are exempted from mandatory security certification (ComSec):

1. Cloud-implemented IP Routers, including:
   1. Cloud-capable
   2. Cloud-controlled
   3. Cloud-native
   4. Cloud-managed IP routers
2. Wi-Fi Customer Premises Equipment (CPEs), including:
   1. Cloud-hosted
   2. Cloud-managed Wi-Fi CPEs

This exemption applies only to security certification requirements that are under the ComSec framework.

What is the Date of Implementation?

• Exemption validity is mainly up to 31st May 2025.
• Until this date, the above-mentioned cloud-based IP routers and Wi-Fi CPEs are not required to obtain ComSec security certification.

Benefits to Businesses

• Businesses get regulatory relief for manufacturers as well as importers of cloud-based network devices.
• There is now faster product deployment without immediate ComSec certification hurdles.
• Manufacturers as well as importers can benefit from major cost savings on security testing and evaluation during the exemption period.
• Encouragement for cloud-native innovation in telecom infrastructure drives more growth in the Indian economy.
• There is a longer time buffer for OEMs to prepare for future mandatory security compliance, if notified.

Now, What Should Businesses Do?

OEMs, importers, as well as telecom equipment providers who are dealing in cloud-implemented IP routers as well as Wi-Fi CPEs should take advantage of this exemption period in order to continue operations without ComSec certification, while simultaneously monitoring regulatory developments beyond 31st May 2025. Businesses are advised to maintain proper technical documentation and architecture clarity in order to demonstrate eligibility under the cloud-based exemption, if required by authorities.

Brand Liaison, with its 10+ years of expertise in telecom regulatory compliance, assists clients in TEC certifications, ComSec advisory, MTCTE compliance, as well as regulatory impact assessments, helping businesses stay compliant today while preparing strategically for future certification requirements.