**1. Introduction**
– The Government of India, through the Ministry of Home Affairs and the Ministry of Electronics and Information Technology (MeitY), has issued an office memorandum to address the procurement of CCTV and video surveillance systems. This memorandum outlines new guidelines and amendments aimed at enhancing security and promoting local manufacturing.
**2. Key Notifications and Amendments**
– **Public Procurement Order (PPO) 2017**:
– An amendment was made on March 6, 2024, to encourage the procurement of CCTV and video surveillance systems that are locally manufactured. This is part of the “Make in India” initiative to boost domestic production.
– **Electronics and Information Technology Goods Order 2021**:
– An amendment dated April 9, 2024, has been issued to ensure that CCTV systems require compulsory registration, enhancing the regulatory framework for electronic products.
– **Advisory on Information Leakage**:
– An advisory dated March 11, 2024, addresses concerns regarding the security implications of CCTV systems, emphasizing the need for cyber auditing and testing of hardware related to CCTV cameras and IoT devices.
**3. Procurement Guidelines**
– All government agencies are advised to procure CCTV systems based on the amended Public Procurement Order and ensure compliance with the security measures outlined in the notifications.
– Agencies should prioritize the procurement of locally manufactured products to support the “Make in India” initiative, thereby enhancing local manufacturing capabilities.
**4. Security Measures for CCTV Systems**
– **Physical Security**:
– Use tamper-resistant camera enclosures and locking mechanisms to deter physical tampering. Access to the CCTV control room and equipment should be restricted to authorized personnel only.
– **Network Security**:
– Employ encryption for data transmission to protect against unauthorized access. Maintain network isolation (air-gap) from public networks to minimize cyberattack risks. If air-gap is not feasible, use network segmentation, secure tunnels, or VPNs to restrict access.
– **Software Security**:
– Change default passwords immediately upon installation and use strong, unique passwords for all devices. Regularly check for firmware updates from manufacturers to address security vulnerabilities. Disable any unnecessary features that could introduce security risks.
– **Data Security**:
– Ensure that all communication between cameras, recorders, and viewing devices is encrypted. Implement strong data storage and retention policies, mandating that data from CCTV systems installed in government establishments be stored within India.
– **Testing and Certification**:
– CCTV cameras (Analog/IP/Speed Dome) must comply with essential security requirements as specified in the Public Procurement Order. Security testing certificates must be issued by recognized laboratories, with a validity of three years.
**5. Compliance and Monitoring**
– Government ministries and departments are instructed to ensure that their Chief Information Security Officers (CISOs) enforce the above measures to address security threats associated with CCTV systems. Regular audits and monitoring of the CCTV systems should be conducted to ensure compliance with security protocols.
**6. Implementation Timeline**
– The new guidelines will come into effect three months from the date of issuance of the notification. The first year for compliance will be considered up to March 31, 2025. No electronic product notifications under the Public Procurement Order will have retrospective effects.
**7. Conclusion**
– The memorandum emphasizes the importance of securing CCTV systems to protect sensitive information and ensure effective operation. By adhering to these guidelines, government agencies can enhance the security and integrity of their video surveillance systems while supporting local manufacturing initiatives.
This detailed summary provides a comprehensive overview of the government order regarding the procurement and security of CCTV systems in India, highlighting the key points and measures outlined in the memorandum.