These measures (detailed in annex 1, table 1) can be used to mitigate the risks identified in the EU coordinated risk assessment report. They can be complemented by supporting actions to reinforce their effectiveness. 4.1.1 Strategic measures cover measures concerning increased regulatory powers for authorities to scrutinise network procurement and deployment, specific measures to address risks related to non-technical vulnerabilities (e.g. risk of interference by a third country or dependency risks), as well as possible initiatives to promote a sustainable and diverse 5G supply and value chain in order to avoid systemic, long-term dependency risks. Strategic measures are potentially highly effective in addressing certain 5G cybersecurity risks identified in the EU coordinated risk assessment report. The following eight strategic measures have been identified: • SM01 Strengthening the role of national authorities; • SM02 Performing audits on operators and requiring information; • SM03 Assessing the risk profile of suppliers and applying restrictions for suppliers considered to be high risk - including necessary exclusions to effectively mitigate risks- for key assets; • SM04 Controlling the use of Managed Service Providers (MSPs) and equipment suppliers’ third line support; • SM05 Ensuring the diversity of suppliers for individual MNOs through appropriate multivendor strategies; • SM06 Strengthening the resilience at national level; • SM07 Identifying key assets and fostering a diverse and sustainable 5G ecosystem in the EU; • SM08 Maintaining and building diversity and EU capacities in future network technologies. 4.1.2 Technical measures include measures to strengthen the security of 5G networks and equipment by reinforcing the security of technologies, processes, people and physical factors. The effectiveness of the technical measures in terms of risk mitigation will vary depending on the scope of the measures and on the types of risks to be addressed. In particular, technical measures alone would not allow to address non-technical vulnerabilities (e.g. risk of interference by a third country or dependency risks). The following 11 technical measures have been identified: • TM01 Ensuring the application of baseline security requirements (secure network design and architecture); • TM02 Ensuring and evaluating the implementation of security measures in existing 5G standards; • TM03 Ensuring strict access controls; • TM04 Increasing the security of virtualised network functions; • TM05 Ensuring secure 5G network management, operation and monitoring; • TM06 Reinforcing physical security; • TM07 Reinforcing software integrity, update and patch management; • TM08 Raising the security standards in suppliers’ processes through robust procurement conditions; • TM09 Using EU certification for 5G network components, customer equipment and/or suppliers’ processes; • TM10 Using EU certification for other non 5G-specific ICT products and services (connected devices, cloud services); 12