Requirements related to suppliers’ processes and equipment TM08: Raising the security standards in suppliers’ processes through robust procurement conditions TM09: Using EU-wide certification for 5G network components and/or suppliers’ processes MEDIUM (possibly HIGH in the long term)  Resource costs  Sector-specific economic impacts (operators and suppliers) MEDIUM and LONG term Risk 7: Significant disruption of critical infrastructure or services Risk mitigation plan: Increase network security, ensure resilience and continuity and raise quality of supplier’s processes and equipment Most relevant/high-impact measures Regulatory powers: SM01: Strengthening the role of national authorities SM02: Performing audits on operators and requiring information Network security – baseline measures TM01: Ensuring the application of baseline security requirements (secure network design and architecture) TM02: Ensuring and evaluating the implementation of security measures in existing 5G standards Network security – 5G specific measures TM03: Ensuring strict access controls TM04: Increasing the security of virtualised network functions TM05: Ensuring secure 5G network management, operation and monitoring TM06: Reinforcing physical security TM07: Reinforcing software integrity, update and patch management Requirements related to suppliers’ processes and equipment: TM08: Raising the security standards in suppliers’ processes through robust procurement conditions TM09: Using EU-wide certification for 5G network components and/or suppliers’ processes Resilience and continuity: TM11: Reinforcing resilience and continuity plans Expected effectiveness Potential implementation factors Indicative timeframe Depends on scope of measures, but can be HIGH or VERY HIGH  Resource costs  Sector-specific economic impacts (operators)  (potentially) Broader economic and/or societal impacts Depends on scope of measures, but can be MEDIUM TO HIGH  Resource costs Sector-specific economic impacts SHORT term Depends on scope of measures, but can be HIGH.  Resource costs Sector-specific economic impacts SHORT term. Depends on 5G deployment calendar. MEDIUM (possibly HIGH in the long term)  Resource costs  Sector-specific economic impacts (operators and suppliers) MEDIUM and LONG term Depends on scope of measures, but can be HIGH.  Resource costs  Sector-specific economic impacts SHORT term SHORT term. Depends on 5G deployment calendar. 36