CCTV cameras manufactured, imported, or sold in India must be tested for Essential Security Parameters at a Standardisation Testing and Quality Certification (STQC) laboratory, under an amendment to MeitY's Compulsory Registration Order (CRO). This requirement, covering analogue and IP CCTV cameras, speed-dome cameras, and DVR/NVR units under IS 13252-1 Annexe A, has been mandatory since 9 April 2025 with no further extension granted. The STQC security testing report is valid for three years, and since the mandatory date, no IP CCTV camera can obtain a BIS Standard Mark license without it — making STQC testing a prerequisite for BIS registration rather than a standalone requirement.
CCTV cameras have become part of the everyday infrastructure of Indian cities, workplaces, and public spaces — watching streets, guarding premises, and backing up incident investigations. But a camera that is easy to hack or tamper with defeats its own purpose, and can even become a liability rather than a safeguard.
That risk is why the Ministry of Electronics and Information Technology (MeitY) amended the Compulsory Registration Order governing CCTV cameras, adding a mandatory security-testing layer on top of existing BIS requirements. This guide walks through what changed, which products are affected, what gets tested, and how manufacturers and importers get compliant.
📑 Quick Navigation
- What Is STQC Certification?
- The MeitY CRO Amendment for CCTV Cameras
- Essential Security Parameters — What's Required
- Test Categories Under the Essential Requirements
- Implementation Timeline
- STQC for CCTV Cameras — Key Facts
- Certification Process
- Document & Preparation Checklist
- Why This Certification Matters
- Risk of Non-Compliance
- How Rego Services Supports Your Certification
- Frequently Asked Questions
What Is STQC Certification?
Standardisation Testing and Quality Certification (STQC) is the testing and quality-assurance framework that underpins confidence in India's IT and electronics products. STQC laboratories evaluate whether a product meets defined technical and security benchmarks before it reaches the market — a role that becomes especially important for devices, like CCTV cameras, that sit on networks and capture sensitive data.
For CCTV cameras specifically, STQC testing has moved from a quality-assurance nicety to a mandatory security gate, closely tied to the product's eligibility for BIS registration.
The MeitY CRO Amendment for CCTV Cameras
MeitY's amendment to the Compulsory Registration Order (CRO) requires CCTV cameras to be tested for essential security parameters before they can legally be manufactured, imported, or sold in India. The order applies across several device categories:
Traditional analogue-based surveillance cameras fall within the amended CRO's scope.
Network-connected IP cameras are subject to the full Essential Requirements security testing under IS 13252-1 Annexe A.
Both analogue and IP speed-dome CCTV cameras are named categories under the order, with IP variants facing the full ER testing requirement.
Recording units that store and manage surveillance footage are also covered under the amended registration order.
The clarification, issued via notification on 6 March 2024, addressed how local content is calculated for these device categories and set out the security testing obligation that follows.
Essential Security Parameters — What's Required
The security requirements for CCTV and video surveillance systems (VSS) span several layers of the product, not just a single check at the network level:
Tamper-resistant enclosures and locking mechanisms to deter physical interference with the device.
Authentication and role-based access control, with access permissions reviewed and updated as personnel change.
Encryption of data in transit to protect footage and control signals moving across the network.
Regular software updates, disabling of unused features, strong password policies, and penetration testing to surface exploitable vulnerabilities.
Test Categories Under the Essential Requirements
| S.No. | Test Category |
|---|---|
| 1 | Hardware-level security parameters (supported by software) |
| 2 | Software / firmware security |
| 3 | Secure process conformance |
| 4 | Security conformance at the product development stage |
Implementation Timeline
MeitY issued a notification clarifying local content calculation for the named CCTV camera and DVR/NVR categories.
MeitY enforced Phase 7 amendments to the 2021 CRO, introducing the Essential Requirements testing obligation for CCTV cameras.
The requirement was originally set to take effect six months after notification; MeitY extended this deadline by a further six months.
The Essential Requirements testing obligation became fully mandatory, and no further extension has been granted since.
STQC for CCTV Cameras — Key Facts
| Attribute | Detail |
|---|---|
| Product | Analogue & IP CCTV cameras, analogue & IP speed-dome cameras, DVR/NVR |
| Regulatory instrument | MeitY Compulsory Registration Order (CRO), Phase 7 amendment |
| Testing standard | IS 13252-1, Annexe A (Essential Requirements) |
| Testing authority | STQC-recognised laboratories |
| Report validity | 3 years from date of issue |
| Mandatory from | 9 April 2025 (no further extension) |
| Relationship to BIS | Prerequisite for the BIS Standard Mark license on IP CCTV cameras |
| Applicant | Manufacturer (Indian) or Importer (for imported cameras) |
Certification Process
Determine whether your camera, speed-dome unit, or DVR/NVR falls within the CRO's scope and whether full ER testing applies.
Compile hardware, firmware, and secure-development-process documentation needed to demonstrate compliance with IS 13252-1 Annexe A.
Send representative samples to a BIS-recognised STQC laboratory for testing across hardware, software/firmware, and process conformance categories.
On successful testing, receive the report confirming compliance, valid for three years from issue.
Submit the STQC report as part of your BIS application to obtain the Standard Mark license required to sell the camera in India.
Document & Preparation Checklist
- Product technical specifications — Hardware and firmware details for the specific camera or DVR/NVR model.
- Secure development process documentation — Evidence of how security is built into the product development lifecycle.
- Access control and authentication design details — Covering role-based access control and password policy implementation.
- Network security implementation details — Data-in-transit encryption and related network-layer protections.
- Representative test samples — Units submitted to the STQC laboratory for Essential Requirements testing.
- Existing BIS documentation — Where the model already holds or is pursuing BIS registration in parallel.
- Company and manufacturer registration documents — Standard business documentation supporting the application.
BIS FMCS Certification for Foreign Manufacturers
Importing CCTV cameras or DVR/NVR units manufactured outside India? See our guide to BIS FMCS certification for how foreign manufacturers obtain the BIS approval that now depends on a valid STQC Essential Requirements report.
Why This Certification Matters
Mandatory testing helps ensure CCTV devices deployed across India are free from exploitable security gaps.
The requirement supports sourcing major surveillance system components from reliable, verifiable manufacturers.
Testing across hardware, firmware, and process conformance supports cameras that perform consistently over their operating life.
Mandatory certification aligns with the government's broader effort to regulate CCTV deployment and protect individual privacy.
Risk of Non-Compliance
How Rego Services Supports Your STQC Certification
Rego Services Private Limited manages the complete STQC-to-BIS compliance journey for CCTV camera manufacturers and importers — sequencing Essential Requirements testing alongside your BIS registration so the two workstreams move together rather than causing avoidable delays.
- Applicability assessment — We confirm whether your camera, speed-dome unit, or DVR/NVR falls within the amended CRO and whether full Essential Requirements testing applies.
- Documentation preparation — We prepare the technical and secure-development documentation needed for STQC evaluation.
- Laboratory coordination — We manage sample submission and testing coordination with STQC-recognised laboratories.
- BIS sequencing — We align your STQC report with the BIS Standard Mark application so registration proceeds without avoidable back-and-forth.
- Importer-route support — For cameras sourced from overseas manufacturers, we structure the import and registration pathway end-to-end.
- Renewal tracking — We monitor the three-year validity window and initiate renewal testing ahead of expiry.
Frequently Asked Questions
Is STQC certification mandatory for CCTV cameras?
Yes — under MeitY's amended CRO, CCTV cameras must be tested for Essential Security Parameters at an STQC laboratory, mandatory since 9 April 2025 with no further extension granted.
Which CCTV categories are covered?
Analogue and IP CCTV cameras, analogue and IP speed-dome cameras, and DVR/NVR units, with IP-based and IP speed-dome cameras subject to the full Essential Requirements under IS 13252-1 Annexe A.
How long is the STQC report valid?
The STQC security testing report for CCTV/VSS systems is valid for three years from the date of issue.
Is STQC testing a prerequisite for BIS registration?
Yes. Since the mandatory date, no IP CCTV camera can be approved for a BIS Standard Mark license without a valid Essential Requirements report from a BIS-recognised STQC laboratory.
What does the Essential Requirements test cover?
Hardware-level security supported by software, software/firmware security, secure process conformance, and security conformance at the product development stage.
✓ Key Takeaways
- CCTV cameras must be tested for Essential Security Parameters at an STQC laboratory under MeitY's amended CRO
- Coverage includes analogue and IP CCTV cameras, speed-dome cameras, and DVR/NVR units, tested under IS 13252-1 Annexe A
- The requirement has been mandatory since 9 April 2025, with no further extension
- The STQC security testing report is valid for 3 years
- STQC testing is now a prerequisite for BIS Standard Mark registration on IP CCTV cameras
- Testing spans hardware, software/firmware, secure process conformance, and development-stage security
- Rego Services provides end-to-end support — applicability assessment, documentation, lab coordination, BIS sequencing, and renewal tracking
Your Next Step
With the Essential Requirements mandate now fully in force and directly tied to BIS registration eligibility, CCTV camera manufacturers and importers without a valid STQC report face real market-access risk. Getting testing and BIS registration sequenced correctly from the start avoids unnecessary delay.
Rego Services' regulatory team brings the expertise to manage your complete CCTV compliance journey — from STQC Essential Requirements testing through BIS registration — so your products reach the Indian market on schedule.
Contact Rego Services today to begin your STQC certification for CCTV cameras and keep your products compliant for the Indian market.