Secure 5G networks: EC endorses EU toolbox and sets out next steps
The Commission yesterday endorsed the joint toolbox of mitigating measures agreed by EU Member States to address security risks related to the rollout of 5G, the fifth-generation of mobile networks. This follows the European Council's call for a concerted approach to the security of 5G and the ensuing Commission Recommendation of March 2019. Member States have since identified risks and vulnerabilities at national level and published a joint EU risk assessment. Through the toolbox, the Member States are committing to move forward in a joint manner based on an objective assessment of identified risks and proportionate mitigating measures. With its Communication adopted yesterday, the Commission is launching relevant actions within its competence and is calling for key measures to be put in place by 30 April 2020.
Margrethe Vestager, Executive Vice-President for a Europe Fit for the Digital Age, yesterday said:
“We can do great things with 5G. The technology supports personalised medicines, precision agriculture and energy grids that can integrate all kinds of renewable energy. This will make a positive difference. But only if we can make our networks secure. Only then will the digital changes benefit all citizens.”
Margaritis Schinas, Vice-President for Promoting our European Way of Life, yesterday said:
“A genuine Security Union is one which protects Europe's citizens, companies and critical infrastructure. 5G will be a ground-breaking technology but it cannot come at the expense of the security of our internal market. The toolbox is an important step in what must be a continuous effort in the EU's collective work to better protect our critical infrastructures.”
Thierry Breton, Commissioner for the Internal Market, yesterday said:
“Europe has everything it takes to lead the technology race. Be it developing or deploying 5G technology – our industry is already well off the starting blocks. Today we are equipping EU Member States, telecoms operators and users with the tools to build and protect a European infrastructure with the highest security standards so we all fully benefit from the potential that 5G has to offer.”
While market players are largely responsible for the secure rollout of 5G, and Member States are responsible for national security, 5G network security is an issue of strategic importance for the entire Single Market and the EU's technological sovereignty. Closely coordinated implementation of the toolbox is indispensable to ensure EU businesses and citizens can make full use of all the benefits of the new technology in a secure way.
5G will play a key role in the future development of Europe's digital economy and society. It will be a major enabler for future digital services in core areas of citizens' lives and an important basis for the digital and green transformations. With worldwide 5G revenues estimated at €225 billion in 2025, 5G is a key asset for Europe to compete in the global market and its cybersecurity is crucial for ensuring the strategic autonomy of the Union. Billions of connected objects and systems are concerned, including in critical sectors such as energy, transport, banking, and health, as well as industrial control systems carrying sensitive information and supporting safety systems.
At the same time, due to a less centralised architecture, smart computing power at the edge, the need for more antennas, and increased dependency on software, 5G networks offer more potential entry points for attackers. Cyber security threats are on the rise and become increasingly sophisticated. As many critical services will depend on 5G, ensuring the security of networks is of highest strategic importance for the entire EU.
A new Eurobarometer survey, also published yesterday, shows that awareness of cybercrime is rising, with 52% of respondents stating they are fairly well or very well informed about cybercrime, up from 46% in 2017.
EU toolbox conclusions
The Member States, acting through the NIS Cooperation Group, have adopted the toolbox. The toolbox addresses all risks identified in the EU coordinated assessment, including risks related to non-technical factors, such as the risk of interference from non-EU state or state-backed actors through the 5G supply chain. Based on last October's EU risk assessment report, the toolbox includes strategic and technical measures and corresponding actions to reinforce their effectiveness. These are calibrated based on objective factors.
In the toolbox conclusions, Member States agreed to strengthen security requirements, to assess the risk profiles of suppliers, to apply relevant restrictions for suppliers considered to be high risk including necessary exclusions for key assets considered as critical and sensitive (such as the core network functions), and to have strategies in place to ensure the diversification of vendors.
While the decision on specific security measures remains the responsibility of Member States, the collective work on the toolbox demonstrates a strong determination to jointly respond to the security challenges of 5G networks. This is essential for a successful and credible EU approach to 5G security and to ensure the continued openness of the internal market provided risk-based EU security requirements are respected.
The Commission will support the implementation of an EU approach on 5G cybersecurity and will act, as requested by Member States, using, where appropriate, all the tools at its disposal to ensure the security of the 5G infrastructure and supply chain:
- Telecoms and cybersecurity rules;
- Coordination on standardisation as well as EU-wide certification;
- Foreign direct investment screening framework to protect the European 5G supply chain;
- Trade defence instruments;
- Competition rules;
- Public procurement, ensuring that due consideration is given to security aspects;
- EU funding programmes, ensuring that beneficiaries comply with relevant security requirements.
Latest News from
Speech by President von der Leyen at the European Parliament Plenary on the rule of law crisis in Poland and the primacy of EU law19/10/2021 16:33:00
Speech given by President von der Leyen at the European Parliament Plenary on the rule of law crisis in Poland and the primacy of EU law.
Bosnia and Herzegovina: Council approves conclusions on EUFOR Operation Althea19/10/2021 15:25:00
The Council reiterates its unequivocal commitment to Bosnia and Herzegovina’s EU perspective as a single, united and sovereign country.
The EU Digital COVID Certificate: a global standard with more than 591 million certificates19/10/2021 13:25:00
The Commission yesterday adopted a report on the EU Digital COVID Certificate and its implementation across the EU.
EU-US Trade and Technology Council: Commission launches consultation platform for stakeholder's involvement to shape transatlantic cooperation19/10/2021 11:33:00
The Commission yesterday launched an online consultation platform on the EU-US Trade and Technology Council (TTC), allowing stakeholders to share their views and provide common proposals on the work ahead.
ISIL/Da'esh and Al-Qaeda: sanctions regime prolonged until 31 October 202219/10/2021 10:38:00
The Council today renewed the existing restrictive measures against ISIL/Da'esh and Al-Qaeda and persons, groups, undertakings and entities associated with them, prolonging the duration of the sanctions regime for a further 12 months until 31 October 2022.
Statement by President von der Leyen on vaccine exports19/10/2021 09:25:00
Statement given yesterday by President von der Leyen on vaccine exports.
Statement following Vice-President Šefčovič's meeting with Lord Frost on Friday 15 October18/10/2021 16:33:00
Statement given following Vice-President Šefčovič's meeting with Lord Frost on Friday 15 October.
EU Military Training Mission in Mozambique set to start its operations18/10/2021 15:25:00
The Council recently (15 October 2021) adopted a decision launching the European Union Military Training Mission in Mozambique (EUTM Mozambique).
The European Institute of Innovation and Technology supports the New European Bauhaus with €5 million18/10/2021 14:20:00
The European Institute of Innovation and Technology (EIT) is today launching the ‘EIT Community Booster – Scaling New European Bauhaus Ventures' in order to support the New European Bauhaus initiative.
State aid: Commission approves €700 million French scheme for certain retailers and services affected by the coronavirus pandemic18/10/2021 13:25:00
The European Commission has approved, under the EU state aid rules, a €700 million French scheme to support certain retailers and services affected by the coronavirus pandemic and restrictive measures taken by the French government to limit the spread of the virus.