Connected gadgets may need to clear cyber checks

Manufacturers of connected devices will need to prepare for a sweeping new cybersecurity framework that could soon become mandatory across sectors, according to four people aware of the matter.

- Jatin Grover & Shouvik Das

The proposed recommendations will require all connected devices in critical sectors — from medical scanners and smart meters to transport control systems and industrial equipment — to undergo verification of where they are sourced from, as well as rigorous security testing before deployment, these officials said on condition of anonymity.

The framework is being developed by the National Security Council Secretariat (NSCS), under the Prime Minister’s Office, according to the officials.

The move follows a government assessment that found glaring gaps in cybersecurity certification, exposing imported products and critical infrastructure to risks of malware and tampered components.

"There are lots of devices that are deployed in the power sector, health sector, and railways, for example. They all should be secured," the first official said.