SM04: Controlling the use of Managed Service Providers (MSPs) and equipment suppliers’ third line support  (potentially) Broader economic and/or societal impacts Network security – baseline measures TM01: Ensuring the application of baseline security requirements (secure network design and architecture) TM02: Ensuring and evaluating the implementation of security measures in existing 5G standards Depends on scope of measures, but can be MEDIUM.  Resource costs  Sector-specific economic impacts SHORT term Network security – 5G specific measures TM03: Ensuring strict access controls TM05: Ensuring secure 5G network management, operation and monitoring Depends on scope of measures, but can be HIGH.  Resource costs  Sector-specific economic impacts (operators) SHORT term. Depends on 5G deployment calendar. Risk 3: Low equipment quality Risk mitigation plan: Apply pressure or incentives on suppliers to increase product quality and increase network security and resilience Most relevant/high-impact measures Regulatory powers: SM01: Strengthening the role of national authorities SM02: Performing audits on operators and requiring information Network security – baseline measures TM01: Ensuring the application of baseline security requirements (secure network design and architecture) TM02: Ensuring and evaluating the implementation of security measures in existing 5G standards Network security – 5G specific measures TM03: Ensuring strict access controls TM04: Increasing the security of virtualised network functions TM05: Enforcing secure 5G network management, operation and monitoring TM07: Reinforcing software integrity, update and patch management Requirements related to suppliers’ processes and equipment TM08: Raising the security standards in suppliers’ processes through robust procurement conditions TM09: Using EU-wide certification for 5G network components and/or suppliers’ processes Expected effectiveness Potential implementation factors Depends on scope of measures, but can be HIGH or VERY HIGH.  Resource costs  Sector-specific economic impacts (operators)  (potentially) Broader economic and/or societal impacts Depends on scope of measures, but can be MEDIUM.  Resource costs  Sector-specific economic impacts Depends on scope of measures, but can be HIGH. MEDIUM (possibly HIGH at a long term)  Resource costs  Sector-specific economic impacts (operators and suppliers)  Resource costs  Sector-specific economic impacts (operators and suppliers) Indicative timeframe SHORT term SHORT term SHORT term. Depends on 5G deployment calendar. MEDIUM and LONG term 33