BSMI announced on October 2, 2026 that it has amended the inspection regulations for commodities such as digital cameras and audio-visual recording or playback equipment.
The key points of this announcement compiled by our editor are as follows:
1. Scope of Amendments
Cybersecurity testing is now required for these network-connected products:
digital video cameras
hidden cameras
routers, bridges, switches, network hubs and gateways
smart speakers and smart home assistants
video recorders
displays and TVs
Network-connected definition: products that connect to a network using the Internet Protocol (TCP/IP).
2. Exclusions: Medical devices and telecommunications terminal equipment are excluded.
3. Cybersecurity Test Standards (compliance with any one option is sufficient)
Network-connected digital video cameras and hidden cameras:
(1) CNS 16120-1/-2 + CNS 16132-1/-2
(2) CNS 16190
(3) CNS 18031-1/-2 (wireless products only)
(4) CNS 62443-4-2
(5) CNS 15408 series (2004 or 2021 edition)
Networking equipment (routers, bridges, switches, network hubs, gateways, smart speakers, smart home assistants):
(1) CNS 16190
(2) CNS 18031-1/-2 (wireless products only)
(3) CNS 62443-4-2
(4) CNS 15408 series (2004 or 2021 edition)
Network-connected video recorders:
(1) CNS 16120-1/-3 + CNS 16132-1/-3
(2) CNS 16190
(3) CNS 18031-1/-2 (wireless products only)
(4) CNS 62443-4-2
(5) CNS 15408 series (2004 or 2021 edition)
Network-connected displays and TVs:
(1) CNS 16190
(2) CNS 18031-1/-2 (wireless products only)
(3) CNS 62443-4-2
(4) CNS 15408 series (2004 or 2021 edition)
4. Key Dates
2026/10/2: New standards and new inspection procedures take effect
2028/6/30: Last day for the previous standards; deadline for reissuing existing certificates
2028/7/1: Previous standards and inspection procedures no longer apply
5. Existing Certificate Holders
5.1 Holders must submit cybersecurity documentation and apply for certificate reissuance by 2028/6/30.
The reissued certificate keeps its original validity period.
It will be annotated with the applicable standard and cybersecurity level.
Certificates not reissued by the deadline will be revoked.
5.2 Certificates extended under the previous requirements before 2028/6/30 will remain valid only until 2028/6/30.
6. New Applicants
6.1 Network-connected products certified under the previous requirements will receive certificates valid only until 2028/6/30.
6.2 Network-connected products certified under the new requirements will receive certificates valid for 3 years.
7. BTL Cybersecurity Testing Department Roadmap:
We expect to obtain TAF accreditation for CNS 16190 by Q2 2027, covering testing for all product types in this announcement. We also plan to apply for CNS 18031 TAF accreditation based on customer needs.
