Earlier this week the UK government published the long-awaited
Telecoms Supply Chain Review (available here), setting out its plans more heavily to
regulate the UK telecoms sector in order to improve cyber security
risk management, policy and enforcement.
The Review sets out the concerns about the security and
resilience of the UK's telecoms networks, as being
"largely related to: (a) inadequate industry practices
overall, driven by a lack of incentives to manage security risks to
an appropriate level; and (b) the risk of national dependency on a
small number of viable suppliers."
In addressing these concerns, the Review calls for a 'strong
policy response' and recommends the establishment of a new,
robust security framework for the UK telecoms sector. The new
framework will ensure operators build and operate secure and
resilient networks, and manage their supply chains accordingly. In
addition, operators must assess and mitigate the risks posed by
vendors to
