Government Delays Mandatory Security Testing for Broadband Equipment Amid US Pressure

The Indian government has indefinitely postponed implementation of strict security testing requirements for broadband and telecom equipment following intense diplomatic and corporate lobbying from the United States, marking a significant setback for New Delhi's cybersecurity self-reliance ambitions.

Background:
The now-deferred rules, introduced through the Indian Telegraph (Amendment) Rules 2023, mandated that all broadband equipment - including routers, switches, modems and transmission devices - undergo compulsory testing at government-approved labs starting July 2023. The policy aimed to address growing concerns about backdoors and vulnerabilities in imported telecom gear.

Key Provisions Now on Hold:

1. Mandatory certification for 67 categories of telecom equipment

2. Testing for cybersecurity vulnerabilities and hardware trojans

3. Compliance with India-specific encryption standards

4. Disclosure of source code for critical components

The US Pressure Campaign:

• The Biden administration raised the issue at multiple forums including the US-India Trade Policy Forum

• Commerce Secretary Gina Raimondo reportedly discussed it during her India visit

• US trade representatives warned the rules violated WTO's Technical Barriers to Trade agreement

• Major tech firms like Cisco, Juniper and Arista Networks lobbied through USIBC and TIA

Industry Concerns:

1. Supply Chain Disruptions: Testing would have added 8-12 months to deployment timelines

2. Cost Impacts: Certification costs estimated at 15-20% of equipment value

3. Competition Issues: Alleged preferential treatment to domestic manufacturers like Sterlite and HFCL

Government's Stance:
While officially citing "need for wider consultations", sources reveal:

• MEA pushed for delay fearing impact on US-India tech partnership

• DoT divided between security hawks and pragmatists

• New committee formed to "re-examine" testing parameters

Security Implications:

• Critical infrastructure remains vulnerable to state-sponsored hacking

• Delays implementation of "trusted sources" framework for telecom

• Postpones indigenous testing ecosystem development