GSMA announces progress on network equipment security assurance scheme

The GSMA today announced that the world’s leading mobile network equipment vendors – Ericsson, Huawei, Nokia and ZTE – have successfully completed an assessment of their product development and lifecycle management processes using the GSMA’s Network Equipment Security Assurance Scheme (NESAS).

The NESAS scheme is a collaboration and jointly led by 3GPP and the GSMA. It is open to all vendors of network equipment products that support 3GPP defined functions. NESAS is focused on the vendor aspects of the supply chain and provides a security assurance framework to improve security levels across the mobile industry. NESAS has been developed following established practices and schemes that provide security assurance.

“The GSMA recognises the support and participation of Ericsson, Huawei, Nokia and ZTE who have satisfied the scheme’s security requirements via an independent security audit and we congratulate them on achieving this important first step,” said Alex Sinclair, chief technology officer, GSMA. “By committing to NESAS, vendors are helping network operators, and other stakeholders make informed decisions about secure product development. We look forward to others participating in the scheme, evidencing their commitment to good security practice by promoting a security-by-design culture within the industry.”

During the second stage of NESAS, vendors submit network equipment products to qualified test laboratories for evaluation. This stage involves laboratories running security tests, defined by 3GPP, and checking that the products undergoing evaluation have been developed under the assessed development and lifecycle management processes. The evaluation concludes with the production, by the test laboratory, of a valuation report that records the test results. The report is provided to the vendor who can make it available to its customers and other stakeholders at its discretion.

The GSMA has said it is actively supporting industry efforts to increase network infrastructure security levels. It says that the NESAS represents a critical industry initiative that increases transparency and incentivises vendors to develop and support network equipment in a way that protects operators and their customers.

The following two tabs change content below.

Charlotte Hathway

Charlotte is the editor of Comms Business and writes content that looks to inform and educate the Channel about the latest technology and business developments across the industry. Prior to her current role, she wrote for other MA Business titles New Electronics, Land Mobile and Critical Communications Today. Before moving into journalism, she spent five years working in public relations and has worked with various technology companies spanning telecommunications, cyber security and software development.

Latest posts by Charlotte Hathway (see all)