The National Cybersecurity Center of Excellence within the National Institute of Standards and Technology is soliciting public comments on a draft of its initial recommendations providing guidance on securing 5G networks.
NCCoE is developing the 5G Cybersecurity Practice Guide in collaboration with communications and cybersecurity partners, NIST said Tuesday. The deadline for submitting comments on the guidance draft is on April 15.
The center’s initial recommendations are contained in a 10-page draft executive summary with two key proposed guidance based on the center’s observations using NIST’s testbed on current 5G standards and cybersecurity practices.
Communication systems developer COMSovereign is one of the institute’s 5G cybersecurity guide-setting partners under a 2021 cooperative research and development agreement.
Cloud Technology Stacks’ Design
The first recommendation in the draft guide focuses on integrating cybersecurity and privacy principles in 5G systems’ cloud technology stacks. One approach the draft cited is the inclusion of trustworthy design elements to help ensure configuration integrity in the stacks’ hardware, firmware and software. Such safeguards in support infrastructure will help ensure 5G networks’ protection against advanced cyberattacks, according to the NCCoE document.
The second recommendation in the center’s draft guidance calls for enabling cybersecurity and privacy capabilities specified under the 3rd Generation Partnership Project established in 1998 for 3G mobile standards development. Regardless of variations in their technical implementation, all 5G networks have many cybersecurity and privacy protection features available to users, NIST noted.
The institute said NCCoE is documenting a second NIST Cybersecurity Practice Guide Volume B for additional 5G guidance. A white paper series is also in the pipeline for further details on 5G cybersecurity and privacy capabilities, NIST added.
Related Articles
Gregory Barbaccia, federal chief information officer and a 2025 Wash100 awardee, has shared his insights on how the federal government should advance digital transformation. “I notice a lot of the government considers itself to be ‘digital,’ but in reality, we’ve only digitized, not transformed. Sure we went 0-1, but that should have just been the beginning,” Barbaccia wrote in a LinkedIn post. He noted the lack of automation and that workflows remain unchanged despite the replacement of paper ledgers with spreadsheets. “Files are shared over email instead of through real-time collaboration tools,” he added. Advancing Digital Transformation in Federal Government
The Federal Communications Commission has adopted new rules that seek to eliminate unnecessary paperwork and address regulatory barriers to the ground-station-as-a-service, or GSaaS, business model as part of efforts to drive innovation in the U.S. space economy. FCC said Thursday the new rules establish a process for ground station operators to secure a baseline license without first identifying a satellite point of communication. A simple FCC notification will be required for each new point of communication. According to FCC, the change would eliminate nearly half of earth station modification applications. “Making the smallest change to a satellite system or earth
The General Services Administration has announced a OneGov agreement with Amazon Web Services that will provide up to $1 billion in direct incentive credits to federal civilian agencies. According to GSA, the direct incentive credits, aggregated across the agencies, will include savings on core AWS cloud services through AWS credits, infrastructure and application technologies modernization through AWS modernization credits, access to AWS training and certification through training credits and a streamlined engagement model with greater savings for direct contracts through direct partnerships. Advancing America’s AI Leadership The agreement is expected to accelerate large-scale IT transformation and boost AI innovation across