On 20 August 2026, the National Centre for Communication Security (NCCS), under India’s Department of Telecommunications (DoT), opened stakeholder consultations on draft Generic Test Cases for five 5G core network functions: Unified Data Repository (UDR), Binding Support Function (BSF), Unstructured Data Storage Function (UDSF), Short Message Service Function (SMSF), and Network Slice Admission Control Function (NSACF).

The documents form part of India’s telecom security conformity-assessment framework associated with the Mandatory Testing and Certification of Telecommunication Equipment (MTCTE) regime and the applicable Indian Telecom Security Assurance Requirements (ITSARs). Each draft translates existing security requirements into practical test procedures and includes defined expected results for PASS, covering areas such as secure management interfaces, authentication, cryptographic controls, access control, software integrity, logging, and other product-security functions where applicable.

The consultation remains open for 60 days, with stakeholder comments due by 20 October 2026. The drafts do not yet establish final mandatory test procedures. Once finalized, however, they are expected to provide the operational methodology used by applicants and Telecom Security Testing Laboratories to demonstrate conformity for the affected 5G core functions, making early technical review important for OEMs, suppliers, operators, and security-certification teams.

This regulatory update is assessed as Medium Impact. The five documents are draft test procedures under public consultation and do not create immediate new mandatory obligations, but they may materially affect how 5G core security conformity is demonstrated once finalized.

Key reasons for Medium Impact:

• Five separate 5G core network functions are covered by new draft Generic Test Cases.
• The drafts define practical test steps and expected results for PASS, which can directly shape future laboratory execution and applicant evidence.
• The test cases operationalize existing ITSAR security requirements within India’s telecom security certification framework.
• OEMs and laboratories may need to align product configurations, security documentation, test environments, and evidence with the final methodology.
• Stakeholder comments are due by 20 October 2026, creating a limited window to identify technical issues before finalization.

Who is affected?

Manufacturers and OEMs of 5G core-network equipment or software, telecom operators, applicants for security certification, system integrators, compliance teams, and Telecom Security Testing Laboratories working with UDR, BSF, UDSF, SMSF, and NSACF.

Conclusion:

Affected stakeholders should compare the draft test cases against current product-security controls and certification evidence, identify any implementation or laboratory gaps, and submit comments before 20 October 2026. No immediate redesign is mandated at the consultation stage, but the final test methodology may become a key part of demonstrating security conformity in India