【India ITSAR】Streamlines Telecom Certification: New Flexibility for Software Changes to Speed Up Product Launches
The National Centre for Communication Security (NCCS) in India has issued a landmark circular (No. 1-11/2022-NCCS/ComSec/V-I) dated March 17, 2026, aimed at streamlining the testing process under the Communication Security (ComSec) Scheme.
The release of this document signifies a shift towards a more pragmatic and flexible approach in India’s telecom security auditing.
1. Core Change: Flexibility for Software Modifications during Testing
Previously, software versioning was strictly locked once the testing phase began. The National Centre for Communication Security (NCCS) has now officially permitted applicants to modify the software of a Device Under Testing (DUT) while it is still within the Telecom Security Testing Laboratory (TSTL) process.
2. Mandatory Documentation for Modifications
To leverage this new flexibility, manufacturers must categorize their changes into two compliance paths:
- Code-Level Modifications: Requires the submission of Annexure-I & II, including a comprehensive Impact Assessment to ensure that the integrity of prior testing remains intact.
- Clerical Corrections: Requires only Annexure-II to rectify typos or minor descriptive errors in the Bill of Materials (BOM).
3. Strategic Impact
- Reduced Lead Time: Eliminates the need to restart the entire application process for minor software adjustments.
- Cost Efficiency: Minimizes redundant testing fees and resource allocation.
- Agile Compliance: Allows OEMs to fix security vulnerabilities or bugs discovered during the testing phase in real-time.
4. Applicability
This notification applies to all stakeholders involved in the Indian Communication Security Certification Scheme (ComSec Scheme), including:
- Original Equipment Manufacturers (OEMs)
- Dealers and Importers
- Telecom Security Testing Laboratories (TSTLs)
For further inquiries, please contact:
Email：Charles.liao@theonelab.co
Phone：(02)8601-2828
