The National Centre for Communication Security (NCCS) of India has recently released multiple ITSAR (Indian Telecom Security Assurance Requirements) requirements.
The key points are as follows：
New ITSAR standards introduced for the following products ; mandatory implementation dates will be announced separately：
- L2 / L3 Local Area Network (LAN) switches
- 5G Open Radio Access Network (5G O-RAN), including Intelligent Controller (RIC), Radio Unit (O-RU), Distributed Unit (O-DU), and Centralized Unit (O-CU)
Optimization of the certification process for PON broadband equipment:：
Optical Network Terminal (ONT) and Optical Network Unit (ONU)
- Each unique combination of SoC and SDK is required to undergo one security test
- Other customized versions under the same SoC-SDK combination will be automatically included within the certification scope, with no additional testing required
- A self-declaration of conformity must be submitted at the time of application, detailing all customizations and software hash values
- Additional customized versions under the same SoC-SDK combination may apply for certificate modification via the MTCTE platform and be approved without testing
- Any update to the SoC or SDK will be handled as a software update in accordance with applicable regulations
ITSAR requirements applicable to ONU equipment：
All ITSAR requirements, directions, or notifications issued by NCCS for ONT shall also apply to ONU, effective from the date of issuance, January 1, 2026.