Ad-Hoc Working Group 03 - on 5G Cybersecurity Certification

The application period for the selection of members for ENISA's Ad-Hoc Working group on the "5G Cybersecurity Certification" is closed.

Published under Standards and Certification

When it comes to the security of 5G networks, Member States identified in 2019 the need for a concerted approach. In a step wise approach actions were set out. The NIS Cooperation Group, formed of representatives of Member States, the European Commission and the EU Agency for Cybersecurity (ENISA) performed a EU coordinated risk assessment in 5G networks.

In addition to the EU coordinated risk assessment, ENISA performed a threat landscape mapping: ENISA threat landscape for 5G Networks — ENISA (europa.eu).  Following the EU coordinated risk assessment, and with the insight of the threat landscape, the NIS Cooperation Group published an EU Toolbox of risk mitigating measures (EU Toolbox for 5G Security) to further support the Member States regarding the enhancement of the 5G network security.

Scope

To enhance the framework on 5G cybersecurity and secure 5G deployment in the European Union, the European Commission requested ENISA (upon its mandate to develop cybersecurity certification schemes: Article 8 Cybersecurity Act) to develop a candidate European cybersecurity certification scheme for 5G networks (EU 5G scheme). Upon the task to prepare the candidate EU 5G cybersecurity certification scheme, ENISA launches this call for expression of interest for participation in an Ad Hoc Working Group (EU5G AHWG).

What is the aim of the EU5G AHWG?

This candidate EU 5G scheme addresses only a part of the 5G eco system that was selected by the Member States, based on criteria to achieve stakeholder value and manageable scheme development. Based on this approach, the project will focus on the following use cases for cybersecurity certification:

  1. The supply and deployment of identified 5G network equipment
  2. Management of subscriber identities
  3. Remote SIM provisioning
  4. 5G authentication (incl. roaming)
  5. Subscriber connectivity services

Terms of Reference

Full Terms of Reference can be downloaded through this link: Terms of Reference

Composition

The DECISION No 73/2021 of ENISA's Executive Director of 25 October 2021 has established the ad-hoc group and the lists of selected candidates for membership. The decision was then amended by DECISION No 79/2021 and DECISION No 04/2022.

Members appointed to the Ad hoc Working Group on the candidate EU 5G Cybersecurity Certification Scheme:  Work stream 1 (in alphabetical order) 

First Name

 Surname

 Affiliation

Rasma

Araby

ATSEC Information Security AB - Sweden

Valentin

Constantinescu

Orange Services - Romania

Sergio

Cozzolino

Telecom Italia Mobile (TIM) - Italy

Patricia

Diez Muñoz

TELÉFONICA - Spain

Jesus

Fernandez

DEKRA Testing and Certification

Joe

Malcolm

CISCO Systems - UK

Mohamad

Hajj

Internet of Trust - France

John

Hickey

NOKIA - Ireland

Sven

Lachmund

Deutsche Telekom - Germany

Tangi

Lavanant

Orange - France

Patrik

Palm

ERICSSON - Finland

Jose

Pico

LAYAKK Seguridad Informatica - Spain

Pere

Quetglas

SGS Brightsight – Spain

Wouter

Slegers

TrustCB The Netherlands

David

Stokes

SAMSUNG - UK

Members appointed to the Ad hoc Working Group on the candidate EU 5G Cybersecurity Certification Scheme:  Work stream 2 (in alphabetical order) 

First Name

 Surname

Affiliation

Guido

Abate

STMicroelectronics

Aguibou

Barry

Google

Sergio

Cozzolino

TIM

Jan

Eichholz

Giesecke Devrient Mobile Security GmbH

Jean- Philippe

Galvan

Qualcomm

Mohamad

Hajj

Internet of Trust - France

James

MacFarlane

NXP Semiconductors

Guillem Ernest

Malagarriga

Applus Laboratories

Mariela

Pavlova

Infineon

Denis

Praca

Thales DIS

Pere

Quetglas

SGS Brightsight

Jens

Ruedinger

Vodafone

Jose Emilio

Rico Martinez

Dekra Testing and Certification

Wouter

Slegers

TrustCB

Jean- Philippe

Wary

Orange

Members appointed to the Ad hoc Working Group on the candidate EU 5G Cybersecurity Certification Scheme:  Work stream 3 (in alphabetical order) 

First Name

 Surname

Affiliation

Aguibou

Barry

 Google

Valentin

Constantinescu

Orange Services - Romania

Sergio

Cozzolino

TIM

 Patricia

Diez

Telefonica

Jan

Eichholz

 Giesecke Devrient Mobile Security GmbH

Jean Philippe

Galvan

 Qualcomm Technologies

Mohamad

Hajj

Internet of Trust - France

John

Hickey

Nokia

Paul

Hopkins

Vodafone Group plc

Sven

Lachmund

Deutsche Telekom

 Beatriz

Martinez Candano

Ericsson

Momchil

Nikolov

Telenor Bulgaria

Krzysztof

Nurowski

P4 Iliad Group

James

MacFarlane

NXP Semiconductors

Denis

 Praca

Thales DIS

Christian

Schneckenburger

 Infineon Technologies

Stefan

Schroeder

Samsung Electronics

Jean- Philippe

Wary

Orange Labs

Frequently Asked Questions

For questions and clarifications kindly visit our FAQ page or contact us at 5Gcertification@enisa.europa.eu.

We use cookies on our website to support technical features that enhance your user experience.
We also use analytics. To opt-out from analytics, click for more information.

I've read it More information