Telecom service providers (TSPs) must grant the government access to critical telecom infrastructure (CTI) under the new Telecom Act, 2023. The Act empowers the central government to designate telecom networks as CTI if their disruption could pose significant threats to national security, public health, the economy, or public safety.
Key Provisions of the Telecom Act, 2023
1. Chief Telecom Security Officer (CTSO):
The government is required to appoint a Chief Telecom Security Officer to oversee the security and resilience of telecom networks.
2. Mandatory Cybersecurity Reporting:
Entities experiencing or identifying cybersecurity incidents must report them to the government within six hours, a revision from the earlier two-hour deadline. While an improvement, experts note that six hours is still stringent compared to global standards.
Concerns Over Regulation
Experts warn that the telecom sector may face over-regulation, as it is also classified as critical information infrastructure under the Information Technology Act. This dual classification places it under the purview of both the National Critical Information Infrastructure Protection Centre (NCIIPC) and the new Telecom Act.
Focus on Trusted Vendors
The Indian government has taken steps to secure telecom infrastructure, including:
– Establishing a “trusted vendors” system to prevent Chinese or unsafe vendors from supplying critical telecom equipment.
– Mandating telecom operators to replace existing Chinese-supplied equipment in their live networks.
These measures aim to create a safer and more secure telecom ecosystem, reducing risks of exploitation by foreign entities.
Also Read:
All About Telecom Cyber Security Rules 2024
Vendor Landscape in India
Ericsson dominates the telecom equipment market in India, with Samsung emerging as a newer player in the 5G space. Previously, Samsung was the primary vendor for Reliance Jio during its initial 4G rollout.
By prioritizing trusted vendors and enforcing stringent security protocols, the Indian government aims to safeguard its telecom infrastructure from internal and external threats.