The GSMA, the industry organisation that represents the interests of 750 mobile operators around the world, has reviewed Huawei's 5G wireless and core network equipment, and has announced that all of Huawei’s products have passed the first round of its Network Equipment Security Assurance Scheme (NESAS).
“By committing to NESAS, vendors are helping network operators, and other stakeholders make informed decisions about secure product development,” explained GSMA CTO Alex Sinclair. “We look forward to others participating in the scheme, evidencing their commitment to good security practice by promoting a security-by-design culture within the industry.”
However, given that Huawei is a prominent member of the GSMA, it seems unlikely that the news will shift political thinking in the UK and beyond; although network operators will likely reference it when asking for further clarification over why they must remove Huawei kit, at the cost of billions to the industry.
What is NESAS?
NESAS is a standardized cybersecurity assessment mechanism, jointly defined by GSMA and 3GPP, together with major global operators, vendors, industry partners and regulators. It provides an industry-wide security assurance framework to facilitate improvements in security levels across the mobile industry.
Huawei’s 5G products – as well as those from ZTE, Ericsson and Nokia – have passed the first audit round, which focuses on product development and lifecycle management processes. And now the companies have met the first round of approval, they will submit specific pieces of equipment to approved labs for evaluation.
“GSMA NESAS is the latest approach in assessing the network security of mobile communications,” said Devin Duan, head of 5G E2E cybersecurity marketing at Huawei. “In the 5G era, NESAS provides a standardized and effective cyber security assessment, which allows the communications industry to ensure fairness.
“The Assessment is also a valuable reference for stakeholders, such as operators, equipment vendors, government regulators, and application service providers. Huawei has always focused on technology-driven cyber security. We welcome NESAS with full support and collaboration. We also invite the entire industry to jointly promote the development of a more aligned mobile communications market.”
The summary independent audit reports of the NESAS assessment can be found here.