
ILT-U-4124
Cybersecurity for IP Cameras
DETERMINATION | METHOD |
| Conformity of authentication mechanisms (e.g. no universal default passwords, credential strength, brute-force protection) | ETSI EN 303 645 – Provision 5.1 evaluated using ETSI TS 103 701 test groups (TSO 5.1) |
| Implementation of vulnerability disclosure processes | ETSI EN 303 645 – Provision 5.2 evaluated using ETSI TS 103 701 test groups (TSO 5.2) |
| Security of software update mechanisms (integrity, authenticity, anti-rollback) | ETSI EN 303 645 – Provision 5.3 evaluated using ETSI TS 103 701 test groups (TSO 5.3) |
| Secure storage of sensitive security parameters | ETSI EN 303 645 – Provision 5.4 evaluated using ETSI TS 103 701 test groups (TSO 5.4) |
| Secure communication mechanisms (encryption, protocol security) | ETSI EN 303 645 – Provision 5.5 evaluated using ETSI TS 103 701 test groups (TSO 5.5) |
| Minimization of exposed attack surfaces | ETSI EN 303 645 – Provision 5.6 evaluated using ETSI TS 103 701 test groups (TSO 5.6) |
| Software integrity verification | ETSI EN 303 645 – Provision 5.7 evaluated using ETSI TS 103 701 test groups (TSO 5.7) |
| Security of personal data | ETSI EN 303 645 – Provision 5.8 evaluated using ETSI TS 103 701 test groups (TSO 5.8) |
| Resilience to outages | ETSI EN 303 645 – Provision 5.9 evaluated using ETSI TS 103 701 test groups (TSO 5.9) |
| User data deletion capabilities | ETSI EN 303 645 – Provision 5.11 evaluated using ETSI TS 103 701 test groups (TSO 5.11) |
| Input data validation | ETSI EN 303 645 – Provision 5.13 evaluated using ETSI TS 103 701 test groups (TSO 5.13) |
| Vietnam data storage configuration (data sovereignty) | QCVN 11:2026/BCA Requirement 2.11.5 – Verification of configurable local data storage capability |
| Overall conformity of the Device Under Test (DUT) with QCVN 11:2026/BCA | Qualitative assessment based on PASS / FAIL / NA verdicts per test case defined in ETSI TS 103 701 |

