BIS CCTV ER-01 2024

Regulatory Scope

The BIS CCTV ER-01 2024 framework applies to all CCTV cameras and recorders manufactured, imported, or sold in India. These critical regulations came into effect on October 9, 2024.

The Four Pillars of Security

Hardware Level Security Controls:

• Verification that debugging interfaces (USB, UART, JTAG, SWD) are disabled or protected.
• Validation of secure boot via boot image signature verification.
• Confirmation of unique cryptographic keys and certificates for each individual device.
• Secure storage of sensitive data and private keys using secure hardware or strong cryptography.

Software and Firmware Security Controls:

• Enablement of memory protection mechanisms such as ASLR and DEP.
• Protection of data in transit using secure TLS versions and strong encryption.
• Secure firmware updates with digital signature validation and anti-rollback protection.
• Secure code reviews to remove banned functions and detect hardcoded credentials.

Secure Communication and Supply Chain Controls:

• Mutual authentication and encryption for supported wireless communication channels.
• Disclosure and validation of all network protocols used by the device.
• Verification of trusted sourcing for critical hardware via a Bill of Materials.

Product Development and Manufacturing:

• Comprehensive hardware architecture documentation at the PCB and SoC level.
• Malware detection during development and final product packaging.
• Controls and risk assessments to reduce counterfeit or compromised components.

Why CNLABS

CNLABS is the first BIS-recognized laboratory for CCTV security testing under IS 99999:2024. With a team of certified professionals and approvals from global bodies like TEC India, NIST, and the IPv6 Forum, CNLABS is fully equipped to assist stakeholders in achieving compliance with these essential standards.