QCVN 135:2024/BTTTT - Security Requirements for IP Cameras

QCVN 135:2024/BTTTT is a technical regulation specifying the basic information security requirements for IP Cameras, issued by the Ministry of Information and Communications (now the Ministry of Science and Technology) on December 31, 2024. The issuance of this regulation helps protect national information systems, individuals, and organizations from cyber security threats arising from the rapid and complex development of surveillance camera devices.

See more: Capacity Profile Of Phuc Gia Laboratory Corporation

Table of contents

Please wait a moment to load the QCVN 135:2024/BTTTT on Basic Information Security Requirements for IP Cameras

Click here to download the QCVN 135:2024/BTTTT on Basic Information Security Requirements for IP Cameras

1. What is an IP Camera?

An IP Camera (Internet Protocol Camera – Surveillance camera using Internet Protocol) is a type of digital camera capable of sending and receiving data over the Internet. This device does not require a separate video recorder but can operate independently and transmit live images directly to network-connected devices such as phones, computers, or storage servers.

2. Importance of Issuing QCVN 135:2024/BTTTT

The use of surveillance cameras in Vietnam is rising sharply; according to forecasts and statistics from the Department of Vietnam Customs, over 16 million surveillance camera devices have been imported and deployed in the Vietnamese market over the past 5 years. However, these devices are primary targets for hackers in cyberattacks and possess numerous risks of being exploited, infiltrated, and hijacked, leading to information insecurity. Currently, most information systems using surveillance cameras have not implemented network information security measures according to the levels prescribed in Decree No. 85/2016/NĐ-CP dated July 01, 2016.

Therefore, the implementation and application of the National Technical Regulation for surveillance cameras is an urgent matter, directly related to network information security and the protection of user privacy and interests. Following a period of collecting feedback on the draft, on December 31, 2024, the Ministry of Information and Communications (MIC) issued Circular 21/2024/TT-BTTTT enclosed with the National Technical Regulation QCVN 135:2024/BTTTT on basic information security requirements for IP Cameras.

See more: Ensuring Network Information Security for Surveillance Camera Systems

3. Scope of Application

QCVN 135:2024/BTTTT applies to Vietnamese and foreign organizations and individuals throughout the territory of Vietnam engaged in the production and business of equipment within the scope of this regulation.

Accordingly, IP Cameras must undergo testing according to QCVN 135:2024/BTTTT when they fall under one of the following four HS codes:

ORD	Product Name According to QCVN 135:2024/BTTTT	HS Code	Product Description
01	Internet Protocol surveillance camera equipment	8525.83.10 8525.83.90 8525.89.10 8525.89.90	Digital cameras, capable of connecting via Internet Protocol, performing partial or full surveillance and recording.

4. Overview of QCVN 135:2024/BTTTT Content

QCVN 135:2024/BTTTT stipulates the basic network information security technical requirements for Internet Protocol surveillance camera equipment. This regulation details 11 groups of information security requirements for IP Cameras, including:

(1) Unique password initialization

(2) Vulnerability management

(3) Update management

(4) Storage of sensitive security parameters

(5) Secure communication channel management

(6) Prevention of attacks through device interfaces

(7) Protection of user data

(8) Ability to self-recover to normal operation after an incident

(9) Data deletion on the camera device

(10) Input data authentication

(11) Data protection on the camera device

The implementation of certification and Declaration of Conformity for equipment within the scope of QCVN 135:2024/BTTTT shall be carried out in accordance with the Circular specifying the List of potentially unsafe products and goods under the management responsibility of the Ministry of Information and Communications, conformity assessment methods (Method 1, Method 5, and Method 7), and current regulations.

5. Effectiveness of QCVN 135:2024/BTTTT

Circular 21/2024/TT-BTTTT takes effect from February 15, 2025, providing the implementation roadmap for QCVN 135:2024/BTTTT regarding IP Cameras as follows:

From February 15, 2025: QCVN 135:2024/BTTTT is applied on a voluntary basis for testing, certification of conformity, and declaration of conformity.
From January 01, 2026: Imported and domestically produced Internet Protocol surveillance camera equipment must strictly comply (mandatory) with QCVN 135:2024/BTTTT before being circulated on the market.

Certification and Declaration of Conformity for Internet Protocol surveillance camera equipment will be regulated in the Circular specifying the List of potentially unsafe products and goods under the management responsibility of the Ministry of Information and Communications (expected to be issued in the near future, taking effect as early as July 01, 2025).