Thursday, 31 October 2019 07:45

UK delays decision on Huawei Featured


The UK’s National Security Council has delayed a decision on whether Chinese telco giant Huawei’s equipment will be cleared for use in the country’s 5G Network. An announcement was expected this week, but has been postponed indefinitely, a victim of the Brexit paralysis.

Right now the UK is still a member of the European Union. As such it is party to guidelines the EU is determining for assessing the risk of 5G networks.

The process is the result of a European Commission Recommendation adopted in March 2019 to ensure a high level of cyber security of 5G networks across the EU. The most significant step to date has been the publication of a report on the EU co-ordinated risk assessment on cyber security in 5G networks.

The report, published on 9 October, is based on the results of the national cyber security risk assessments by all EU Member States, including the UK. It identifies the main threats and threats actors, the most sensitive assets, the main vulnerabilities (including technical ones and other types of vulnerabilities) and a number of strategic risks.

The next step was for member states to submit draft security guidelines, which will then be used to develop a "toolbox" of mitigating measures to address the identified cyber security risks at national and EU level. This will be released by the end of 2019. This is the process that the UK has now delayed, putting it out of step with other EU members.

The submissions from EU member states have been watched closely, in the light of the banning of Chinese vendor Huawei from 5G networks in the US and Australia. On 16 October, the German Bundesnetzagentur (Federal Network Agency) submitted its draft guidelines, which were widely interpreted as a go-ahead for Huawei because they said no company should be excluded on non-technical grounds.

Huawei has been very active in the development of 5G networks and planning in Europe. It has a major presence in Brussels, and two weeks ago hosted what it said was first ever vendor-sponsored official EU debate. The event drew more than 300 attendees. It was addressed by Abraham Liu, Huawei's representative to the European Union, and jointly chaired by four Members of the European Parliament, one from each of the major political blocs.

The 9 October EU report identifies a number of important security challenges in 5G networks, compared with the situation in existing 3G and 4G networks:

  • A increased exposure to attacks and more potential entry points for attackers. “With 5G networks increasingly based on software, risks related to major security flaws, such as those deriving from poor software development processes within suppliers are gaining in importance.”

  • Due to new characteristics of the 5G network architecture and new functionalities, certain pieces of network equipment or functions are becoming more sensitive, such as base stations or key technical management functions of the networks.

  • Risks related to the reliance of mobile network operators on suppliers. “This will also lead to a higher number of attacks paths that might be exploited by threat actors and increase the potential severity of the impact of such attacks. Among the various potential actors, non-EU nation states are considered as the most serious ones and the most likely to target 5G networks.” The report did not name them.

  • “In this context of increased exposure to attacks facilitated by suppliers, the risk profile of individual suppliers will become particularly important, including the likelihood of the supplier being subject to interference from a non-EU country.” The report did not mention by name Huawei or the USA or China.

  • “Increased risks from major dependencies on suppliers: a major dependency on a single supplier increases the exposure to a potential supply interruption, resulting for instance from a commercial failure, and its consequences. It also aggravates the potential impact of weaknesses or vulnerabilities, and of their possible exploitation by threat actors, in particular where the dependency concerns a supplier presenting a high degree of risk.”

  • Threats to availability and integrity of networks will become major security concerns: in addition to confidentiality and privacy threats, with 5G networks expected to become the backbone of many critical IT applications, the integrity and availability of those networks will become major national security concerns and a major security challenge from an EU perspective.

The writer visited Brussels as a guest of Huawei.


26-27 February 2020 | Hilton Brisbane

Connecting the region’s leading data analytics professionals to drive and inspire your future strategy

Leading the data analytics division has never been easy, but now the challenge is on to remain ahead of the competition and reap the massive rewards as a strategic executive.

Do you want to leverage data governance as an enabler?Are you working at driving AI/ML implementation?

Want to stay abreast of data privacy and AI ethics requirements? Are you working hard to push predictive analytics to the limits?

With so much to keep on top of in such a rapidly changing technology space, collaboration is key to success. You don't need to struggle alone, network and share your struggles as well as your tips for success at CDAO Brisbane.

Discover how your peers have tackled the very same issues you face daily. Network with over 140 of your peers and hear from the leading professionals in your industry. Leverage this community of data and analytics enthusiasts to advance your strategy to the next level.

Download the Agenda to find out more


Graeme Philipson

Graeme Philipson is senior associate editor at iTWire. He is one of Australia’s longest serving and most experienced IT journalists. He is author of the only definitive history of the Australian IT industry, ‘A Vision Splendid: The History of Australian Computing.’

He has been in the high tech industry for more than 30 years, most of that time as a market researcher, analyst and journalist. He was founding editor of MIS magazine, and is a former editor of Computerworld Australia. He was a research director for Gartner Asia Pacific and research manager for the Yankee Group Australia. He was a long time weekly IT columnist in The Age and The Sydney Morning Herald, and is a recipient of the Kester Award for lifetime achievement in IT journalism.



Recent Comments