5. Toolbox use and implementation 5.1. National and/or EU-level action As outlined above, an appropriate combination of various types of measures is needed to effectively mitigate the identified risks. Indeed, Member States will need to take a range of mitigation actions to effectively address the risk posed by 5G. Measures may be implemented through national and/or EU-level actions, depending on the specific measure/actions. Some measures may be directly introduced or reinforced at national level, while others may require further action or joint action at EU level, in line with the respective competences. The implementation of the strategic measures may require specific legislation at national level in order to fully achieve the impact of the measures. Some Member States have already implemented legislation related to these strategic measures and others are preparing similar legislation. In the future, coordination between Member States or at EU level may be beneficial in order to promote convergent approaches. Measures to promote the sustainability and diversity of the 5G supply and value chain in order to avoid long-term dependencies require a concerted strategic approach, supported by the development of policies and legislation at EU level and/or the effective implementation of existing EU instruments to the 5G context (e.g. in the area of R&I or trade). Many of the technical measures may be implemented in the context of the transposition of the European Electronic Communications Code. In terms of implementation and supervision of these measures, Member States will most likely need to cooperate in capacity building and would retain a level of discretion in supervision method and obligations. As some of these measures will be relevant to any 5G networks in a very similar manner, they may benefit from further enhanced EU cooperation and knowledge sharing, in particular through the review and development of guidelines and best practices and possibly from being further coordinated at EU level. The supporting actions will not likely require legislative support. They will, however, require coordination in the same way. 5.2. Implementation of mitigation plans at national level In selecting which measures are necessary to pursue, individual Member States will decide on the suitability of the measure. The Member State will also need to assess whether it has the resources to enforce the measure or if there is a need to cooperate with other Member States or at EU level. The implementation of the measures by Member States will vary depending on a number of factors, such as the general characteristics of the national telecoms market (including the timeframe for deploying 5G networks, the presence of suppliers within networks and the degree of dependency on individual suppliers, the national resources and capabilities and the legal framework and security requirements already in place). Implementation plans may also specify transitional or gradual phases, in particular where a measure would result in a substantial shift from current practices. Nonetheless, there are a number of overarching common parameters across Member States that make it possible to guide the selection and prioritisation of measures. These are provided through 16