This connection is secure: a 5G risk and resilience framework for the Quad
In the latest paper from the QTN series, the authors – Andreas Kuehn and Trisha Ray from the Observer Research Foundation – argue that the Quad countries need to devise effective ways to jointly manage risk and strengthen resilience of 5G components, domestic and foreign networks and global supply chains.
They recommend that a common framework for 5G risk and resilience could help Quad countries allocate efforts and resources – including building the needed capacities to monitor and manage risk and resilience – to improve recovery and business continuation of 5G networks, as well as associated supply chains.
Key points
- Technical Risk, to address risk from 5G architecture and protocols.
- Supply Chain and Connectedness Risk, to address risk from supply chain disruptions due to natural and man-made causes, including conflict, but also geopolitical pressures, complex supply chain interdependencies, and national powers to control national suppliers.
- Capability and Capacity Risk, to address insufficient institutional capability and capacity, including in terms of expertise, institutional relationships, and personnel, to monitor and manage 5G security risks.
Policy recommendations
- Conduct joint risk assessments of 5G supply chains, including scenarios for common threat vectors and define mitigation measures for vendors and operators.
- Define common standards for what “trustworthy” behaviour should look like for 5G vendors and equipment providers.
- Establish a 5G Agenda for the Quad Critical and Emerging Technologies Working Group.
- Coordinate policy priorities in international forums on ICT security and standard setting.
- Build a Multistakeholder 5G Resilience Alliance.
About the series
This paper has been written for the Quad Tech Network Dialogue, as part of the Quad Tech Network (QTN) initiative. QTN is an initiative of the NSC, delivered with support from the Australian Government. It aims to establish and deepen academic and official networks linking the Quad nations – Australia, India, Japan, and the United States – in relation to the most pressing technology issues affecting the future security and prosperity of the Indo-Pacific.