The NESAS security program of the global industry organizations GSMA and the standards body 3GPP has made a step forward. This was announced by the GSMA on August 24, 2020 known. The suppliers Ericsson, Huawei, Nokia and ZTE have successfully completed an assessment of their product development and life cycle management processes according to NESAS. Samsung from South Korea and NEC from Japan were not mentioned.
The NESAS (Network Equipment Security Assurance Scheme) is about subjecting 5G equipment manufacturers worldwide to an independent industrial security review. According to information from Golem.de from industry circles, NESAS could also serve as the basis for 5G security from the BSI (Federal Office for Information Security) in Germany.
“The GSMA recognizes the support and participation of Ericsson, Huawei, Nokia and ZTE who have met safety requirements through an independent safety audit, and we congratulate them on this important first step”said Alex Sinclair, GSMA’s chief technology officer. It’s about promoting a security-by-design culture in the industry.
In the second phase of NESAS, network equipment providers will submit their 5G products to test laboratories for evaluation. The test ends with the creation of an assessment report by the test laboratories, which is issued by the manufacturer “Make available to its customers and other stakeholders at its own discretion” could. The laboratories must be certified for accreditation according to the globally applicable standard 17025.
The GSMA board of directors consists of 26 representatives from the most important telecommunications operators, including Telefónica, AT&T, Verizon, América Móvil, China Mobile, China Telecom and China Unicom. Around 750 cell phone operators and around 200 manufacturers of network equipment and smartphones are organized in the industry organization.