Ad-Hoc Working Group 03 - on 5G Cybersecurity Certification

When it comes to the security of 5G networks, Member States identified in 2019 the need for a concerted approach. In a step wise approach actions were set out. The NIS Cooperation Group, formed of representatives of Member States, the European Commission and the EU Agency for Cybersecurity (ENISA) performed a EU coordinated risk assessment in 5G networks.

In addition to the EU coordinated risk assessment, ENISA performed a threat landscape mapping: ENISA threat landscape for 5G Networks — ENISA (europa.eu).  Following the EU coordinated risk assessment, and with the insight of the threat landscape, the NIS Cooperation Group published an EU Toolbox of risk mitigating measures (EU Toolbox for 5G Security) to further support the Member States regarding the enhancement of the 5G network security.

Scope

To enhance the framework on 5G cybersecurity and secure 5G deployment in the European Union, the European Commission requested ENISA (upon its mandate to develop cybersecurity certification schemes: Article 8 Cybersecurity Act) to develop a candidate European cybersecurity certification scheme for 5G networks (EU 5G scheme). Upon the task to prepare the candidate EU 5G cybersecurity certification scheme, ENISA launches this call for expression of interest for participation in an Ad Hoc Working Group (EU5G AHWG).

What is the aim of the EU5G AHWG?

This candidate EU 5G scheme addresses only a part of the 5G eco system that was selected by the Member States, based on criteria to achieve stakeholder value and manageable scheme development. Based on this approach, the project will focus on the following use cases for cybersecurity certification:

1. The supply and deployment of identified 5G network equipment
2. Management of subscriber identities
3. Remote SIM provisioning
4. 5G authentication (incl. roaming)
5. Subscriber connectivity services

Terms of Reference

Full Terms of Reference can be downloaded through this link: Terms of Reference

Composition

The DECISION No 73/2021 of ENISA's Executive Director of 25 October 2021 has established the ad-hoc group and the lists of selected candidates for membership. The decision was then amended by DECISION No 79/2021 and DECISION No 04/2022.

Members appointed to the Ad hoc Working Group on the candidate EU 5G Cybersecurity Certification Scheme:  Work stream 1 (in alphabetical order) 

Members appointed to the Ad hoc Working Group on the candidate EU 5G Cybersecurity Certification Scheme:  Work stream 2 (in alphabetical order) 

Members appointed to the Ad hoc Working Group on the candidate EU 5G Cybersecurity Certification Scheme:  Work stream 3 (in alphabetical order) 

Frequently Asked Questions

For questions and clarifications kindly visit our FAQ page or contact us at 5Gcertification@enisa.europa.eu.