Connected gadgets may need to clear cybersecurity checks soon

The move follows a government assessment that found glaring gaps in cybersecurity certification, exposing imported products and critical infrastructure to risks of malware and tampered components.

- 

“There are lots of devices that are deployed in the power sector, health sector, and railways, for example. They all should be secured,” the first official said.

The official added that the initial timeline of 1 January 2027 to develop and implement a secure devices ecosystem policy—across pharmaceuticals, hospitals, ports and shipping, energy and power, and space industries—is expected to be pushed back, with the Centre mulling “three to four years” for industries to build capability to implement the policy.

The second official said that there is a need for every sector to enhance their facilities to include cybersecurity — as well as part of testing and certification — to have secured devices in the country. This official added that the proposed framework would be implemented through sectoral regulators.