On January 05th of 2021, ANATEL has issued Act 077 which is now relating some concerns of Cybersecurity that will require conformity also throughout the ANATEL Certification process in Brazil. This will be applicable for all the products listed in the Telecommunications Products Reference List published by the Agency (Act 7280 from November 2020) and for all products that have the function of terminal equipment with an Internet connection or telecommunications network infrastructure equipment. The publication declares that Act to be in force from June 05th, 2021.
The scope of the declaration must consider the different technical characteristics of the equipment (memory, data processing capacity, user interfaces, communication interfaces, characteristics, and versions of the software/firmware – not limited to these) and the purposes for which intended, pointing out which requirements are met.
In the case of your process being an initial certification and homologation of equipment, the application must contain a declaration from the interested party informing which requirements listed in this Act and that its supplier states their product meets all these requirements.