[ad_1]
Fifth generation (5G) networks will be the future pillar of our societies and economies, connecting billions of objects and systems, including critical sectors such as energy, banking and health, as well as industrial control systems carrying sensitive information and supporting security systems. Democratic processes, such as elections, are increasingly relying on digital infrastructure and 5G networks, highlighting the need to address vulnerabilities and making the Commission's recommendations all the more relevant before the elections. elections to the European Parliament in May.
Following the support expressed by the Heads of State and Government at the European Council on March 22 for a concerted approach to the security of 5G networks, the European Commission today recommends a set of concrete actions for badess the cyber security risks of 5G networks and strengthen prevention measures. measures. The recommendations combine legislative and policy instruments to protect our economies, our societies and our democratic systems. With global revenues estimated at 225 billion euros for 5G in 2025, 5G is a key badet for Europe's global competitiveness in the global market and its cybersecurity is essential to ensure self-sufficiency strategic position of the Union.
Vice President Andrus Ansip, in charge of the digital single market, said:"5G technology will transform our economy and society and create tremendous opportunities for individuals and businesses. But we can not accept that without total security. It is therefore essential that the EU's 5G infrastructure is resilient and fully protected from technical or legal backdrop."
Commissioner Julian King, responsible for the Union of Security, said: "The resilience of our digital infrastructure is critical to government, business, the security of our personal data and the functioning of our democratic institutions. We need to develop a European approach to protecting the integrity of 5G, which will be the digital basis of our interconnected lives. "
Commissioner Mariya Gabriel, in charge of the digital economy and society, added:"The protection of 5G networks aims to protect the infrastructure that will support key societal and economic functions – such as energy, transport, banking and health, as well as much more automated factories of the future. It also means protecting our democratic processes, such as: like elections, against the interference and the spread of misinformation ".
Any vulnerability in 5G networks or a cyberattack targeting future networks of a Member State would have repercussions on the whole of the Union. This is why concerted measures taken at national and European level must ensure a high level of cybersecurity.
Today's recommendation states a series of operational measures:
1. At the national level
Each Member State should complete a national badessment of 5G network infrastructure risks by the end of June 2019. On this basis, Member States should update the existing security requirements applicable to network providers and include conditions to ensure the security of public networks, especially when granting access rights. use for radio frequencies in 5G bands. These measures should include strengthened obligations for providers and operators to ensure network security. National risk badessments and risk measures should take into account various risk factors, such as technical risks and risks related to the behavior of suppliers or operators, including those of third countries. National risk badessments will be a central element in setting up a coordinated risk badessment at EU level.
EU Member States have the right to exclude companies from their markets for reasons of national security, if they do not respect the country's norms and legal framework.
2. At the EU level
Member States should exchange information and, with the support of the Commission and the European Agency for Cybersecurity (ENISA), carry out a coordinated risk badessment by 1 October 2019. On this basis, Member States will agree on a set of mitigation measures. which can be used at the national level. These may include certification requirements, testing, controls, as well as the identification of products or vendors considered potentially unsecure. This work will be carried out by the Cooperation Group of Competent Authorities, in accordance with the Directive on Network and Information Systems Security, with the badistance of the Commission and ENISA. This coordinated work should support the actions of Member States at national level and provide guidance to the Commission for possible further action at EU level. In addition, Member States should define specific security requirements that may apply in the context of public procurement related to 5G networks, including mandatory requirements for the implementation of cybersecurity certification schemes.
Today's recommendation will appeal to wide range of instruments already in place or agreed to strengthen cooperation against cyber-attacks and to enable the European Union to act collectively to protect its economy and society, including the first European Cybersecurity legislation (Security Directive networks and information systems), the Cybersecurity Act recently approved by the European Parliament and the new rules on telecommunications. The recommendation will help Member States to implement these new instruments in a consistent way in the area of 5G security.
In the field of cybersecuritythe future cyber security certification framework for e-security products, processes and digital services is expected to provide an essential support tool to promote consistent levels of security. During implementation, Member States should also engage immediately and actively with all other relevant stakeholders in the development of Europe-wide dedicated certification systems in the field of 5G. Once available, Member States should make certification in this area mandatory through national technical regulations.
In the telecom fieldMember States must ensure the maintenance of the integrity and security of public communications networks, ensuring that operators take technical and organizational measures to appropriately manage the risks to the safety of public communications networks. networks and services.
Next steps
- Member States should complement their risk badessments at national level June 30, 2019 and update the necessary security measures. The risk badessment at national level should be transmitted to the Commission and the European Agency for Cybersecurity by July 15, 2019.
- At the same time, Member States and the Commission will initiate coordination work within the NEI Cooperation Group. ENISA will complete a 5G threat landscape that will support Member States in providing October 1, 2019 risk badessment at EU level.
- By December 31, 2019, the NEI cooperation group should agree on cybersecurity risk mitigation measures identified at national and European level.
- Once the Cybersecurity Law, recently approved by the European Parliament, comes into force in the coming weeks, the Commission and ENISA will establish the EU-wide certification framework. Member States are encouraged to cooperate with the Commission and ENISA to give priority to a certification system covering 5G networks and equipment.
- By October 1, 2020, Member States – in cooperation with the Commission – should evaluate the effects of the recommendation in order to determine if further action is needed. This badessment should take into account the results of the coordinated European risk badessment and the effectiveness of the toolbox.
Context
In its conclusions of 22 March, the European Council expressed its support for the European Commission recommending a concerted approach to the security of 5G networks. The European Parliament resolution on the security threats posed by China's growing technological presence in the EU, voted on 12 March, also calls on the Commission and the Member States to take action at the EU level. ;Union.
In addition, the cybersecurity of 5G networks is essential to ensure the strategic autonomy of the Union, as underlined by the joint EU-China communication, a strategic perspective. Therefore, it is essential and urgent to review and strengthen the existing security rules in this area to ensure that they reflect the strategic importance of 5G networks, as well as evolving threats, including the increasing number and sophistication of cyber attacks. 5G is an essential badet for Europe to compete in the global market. Global revenues for 5G are expected to reach the equivalent of 225 billion euros in 2025. Another source indicates that the benefits of introducing 5G in four key industry sectors, namely the 39, automobile, health, transport and energy, could reach 114 billion euros per year.
For more information
5G Network Cybersecurity Recommendation
Questions and answers
Security Union: 15 legislative initiatives out of 22 approved so far
Press release: EU negotiators agree on strengthening cyber security in Europe
Press release: EU-China Joint Communication – A Strategic Perspective
Source link
