NASSCOM-DSCI Response on TRAI Consultation on M2M Communications
The Internet of Things or M2M ecosystem poses unique security challenges as the Internet grows steadily and rapidly. It is widely acknowledged that IoT will be disrupting various Industries like healthcare, agriculture, smart city etc. TRAI/DOT should consider establishing an enabling environment to experiment with different security architectures, including proactive systems for self-defence, both at network and device level. The DoT along with CDAC should continue to focus on standards to drive security in M2M configurations.
We believe it is critical to establish capacity, capabilities and institutions which can do security testing of M2M hardware and software for its secure usage. A regulatory sandbox approach, as is being followed by the fintech industry, for experimentation should be encouraged, as the M2M ecosystem evolves. TRAI/DOT should consider establishing an enabling environment to experiment with different security architectures, at network level, device level and various options.
Also, there is a need for a comprehensive Privacy Law which should talk about what to protect, not how to protect. We firmly believe that the policies around M2M should be technology neutral avoiding any technology preference arising out of regulatory arbitrage.