Research commissioned by European telecom operators has found that the EU’s Cybersecurity Act 2 revamp could make the bloc less resilient, not more. The paper represents a new line of attack from an industry dead-set against the proposal. By forcing telecom operators to kick out risky suppliers — including the likes of Huawei — the European Commission is contradicting its own aim of a diverse supply chain, researchers from Assembly said in a report commissioned by trade body Connect Europe. That would mean “replacing one dependency with another.”
Not only would it mean a less resilient network; the rip-and-replace would also increase costs as there would be less competition and would leave less cash for telcos to build out 5G and fibre networks, Assembly said.
Connect Europe and fellow telco trade body GSMA wrote to Commission President Ursula von der Leyen earlier this year warning that networks will fall over if operators are forced to rip out Chinese equipment.
Eagle-eyed readers may notice that telecom operators are lining up against the prospect of reduced competition among their suppliers but have no issue pushing hard for consolidation in their own industry. James Robinson, a senior analyst at Assembly and one of the report’s authors, said in an interview that the comparison is too simplistic and not “apples for apples.”
The report also reiterates one of the industry’s main arguments, that the three-year timeline for kicking out Huawei et al is too short. Thirty-six months is “really not a long time when it comes to the kind of nature and scale and cost of the operation,” Robinson said. Seven to 10 years is more realistic, the report argued.
Telecom operators shouldn’t have been surprised by the proposal. Its precursor, the 5G toolbox, came out in early 2020, and the United States has taken a hard stance on Huawei. While it’s true that such a move was “signposted,” operators were nonetheless taken aback by the “severity [and] complexity” of the proposal, Robinson said.