Commission warning on the security of 5G networks.

The European Commission is ringing "bells" for the "vulnerabilities" of 5G networks in order to prevent cyber-attacks that could disrupt not only the vital infrastructure but also the democratic processes themselves, such as elections.

Η Commission proposes "operational package", urging Member States and the European Cybersecurity Agency (ENISA) to carry out "risk assessments" by 2019. It also emphasizes that 5G networks, provided they meet high levels of cybersecurity , will ensure strategic autonomy in the European Union, as they will be the backbone of the European economy, raising revenues estimated at 225 billion euros in 2025 - globally. According to another source quoted by the Commission, "the benefits of the introduction of 5G in four key industrial sectors, the automotive industry, health, transport and energy, could reach € 114 billion a year".

The Commission's recommendations become even more important in the run-up to the European Parliament elections in May, and any vulnerability to 5G networks or a cyber attack in one Member State would affect the Union as a whole.

Pointing to the breadth of the spectrum of society and the economy being transformed by fifth-generation networks, the Commission notes that "it will connect billions of objects and systems in critical areas such as energy, transport, banking, health and industrial systems. that carry sensitive information and support security systems. "Democratic processes, such as elections, are increasingly based on digital infrastructure and 5G networks, which makes it imperative to address any vulnerabilities in 5G networks."

"5G technology will open up huge opportunities for citizens and businesses. But we can not accept this to happen without a guarantee of complete security. "It's therefore important that the 5G infrastructure in the EU is resilient and completely secure from technical or legal backdoors," said Digital Single Market Commissioner Andrus Ansip.

"It is necessary to develop a European approach to protecting the integrity of 5G, which will be the digital backbone of our interconnected lives," added Security Commissioner Julian King.

On the same wavelength is Maria Gabriel, Commissioner for the Digital Economy and Society, who pointed out that in addition to vital infrastructure, "with the protection of 5G networks we also seek to ensure democratic processes, such as elections, from interference and misinformation. ».

The Recommendation sets out a series of operational measures:

1. At national level

Each Member State will have to carry out a "national 5G network infrastructure risk assessment by the end of June 2019".

Member States should "update the security requirements for network operators and provide for security conditions, in particular in the procedures for granting radio frequency bandwidth in 5G bands".

National risk assessments "should take into account technical risks and those associated with the conduct of suppliers or operators, including those from third countries".

National risk assessments will be central to the development of a coordinated risk assessment at EU level.

It also provides that EU Member States have the right to exclude from their markets, for reasons of national security, companies that do not comply with the country's standards and legal framework.

2. At EU level

Member States should exchange information with each other and, with the support of the Commission and the European Cybersecurity Agency (ENISA), draw up a coordinated risk assessment by 1 October 2019. On this basis, “Member States will reach a a package of mitigation measures that they can use at national level ". This task will be undertaken by the working group of competent authorities, with the assistance of the Commission and ENISA, and is expected to support Member States' actions at national level and provide guidance to the Commission on possible further steps at EU level.

By 1 October 2020, Member States, in cooperation with the Commission, will have to evaluate the results of the Recommendation in order to identify the issues that need further action. This assessment should take into account the outcome of the coordinated European risk assessment and the effectiveness of the toolbox.

The recommendations, which are a combination of legislative and policy measures of the European Commission, are a continuation of the common position adopted by the Heads of State / Government at the European Council on 22 March on a "harmonized approach to the security of 5G networks".

Source