

These new security risks specific to 5G mobile communications were addressed through Royal Decree-Law 7/2022 of March 29. This Royal Decree-Law establishes that the National Security Scheme for 5G networks and services will carry out a comprehensive and global treatment of the security of 5G networks and services.
In the pursuit of this comprehensive treatment of the security of 5G networks and services, Royal Decree 443/2024 of April 30 was published, approving the National Security Scheme for 5G networks and services (ENS5G) and recognizing the existence of the 5G Security Operations Center, under the Ministry for Digital Transformation and the Civil Service.
As a result of what has been described above, the Ministry for Digital Transformation and the Civil Service has established a 5G Radio Station Security Authorization Procedure, which affects both telecommunications operators and 5G corporate users that have been granted rights to use the public radio domain to install, deploy or operate a private 5G network or provide 5G services for professional purposes or in self-provisioning. This procedure defines a new security authorization, which will need to be requested before putting into service any 5G station in the national territory.
The application will be made telematically in the portal enabled for this purpose:
https://sedediatid.digital.gob.es/es-es/procedimientoselectronicos/Paginas/detalle-procedimientos.aspx?IdProcedimiento=267
and it must include the administrative data and the geographical location of the station, as well as the supplier or suppliers of the 5G equipment.
On the other hand, operators must submit to the Ministry for Digital Transformation and Civil Service, before October 1 of each year, information on the status of implementation of the diversification strategy in the supply chain or when required to do so by the Ministry for Digital Transformation and Civil Service whenever there have been significant changes in the 5G infrastructures used or 5G services provided that lead to believe that the security measures adopted may have lost effectiveness.
In such diversification strategy, the operator shall address the different articles defined in Royal Decree 443/2024 related to the security of 5G stations:
+ Article 16. Determination of locations where equipment from suppliers classified as high risk may not be installed.
+ Article 17. Diversification in the supply chain.
+ Article 22. Common measures for safety management.
+ Article 23. Security management by 5G operators.
Security authorization for 5G radio stations is therefore a regulatory requirement aimed at mitigating risks arising from 5G infrastructure and services.
Discover
our news