On March 20, 2024, the Brazilian National Telecommunications Agency (ANATEL) issued a letter numbered 100/2024/ORCN/SOR-ANATEL clarifying the requirements of Ato 2436 "Minimum Cybersecurity Requirements for Assessing the Conformity of CPE (Customer Premises Equipment) Devices". The letter states that this cybersecurity test is only applicable for end-user CPE devices, with the exception of CPE devices used by enterprises.

Click this link to view the original letter of 100/2024/ORCN/SOR-ANATEL.