A coalition of nine telecom industry trade groups have called on the US government to avoid imposing new security standards on the sector. While acknowledging the growing number of security threats, they said the government should uphold the history of industry-led technical standards in order to best address the issue. The letter to the secretaries of Homeland Security and Commerce was signed by the Telecommunications Industry Association (TIA), Competitive Carriers Association (CCA), Consumer Technology Association (CTA), CTIA, ITI, National Association of Broadcasters (NAB), NTCA, USTelecom, and Wireless Infrastructure Association (WIA).
In particular, they are concerned about the Commerce Department's implementation of an executive order passed in May 2019 by the Trump administration. This laid the groundwork for banning US companies from doing business with Chinese suppliers Huawei and ZTE. It gives the Commerce secretary broad discretion to prohibit working with certain foreign companies in the name of national security.
The industry groups said in the letter that they are keen to work with the new government on efforts to "enhance the security of the ICT ecosystem and maintain US private sector leadership in international standards development". They underlined their existing record on setting industry standards and work already underway to improve supply chain security. For example, the TIA is developing a standard to verify supply-chain security compliance.
Blanket measures like the Trump executive order should be avoided and more tailored solutions developed to address specific problems, the groups said. "The federal government should not attempt to create its own technical demands, nor should it try to supplant private sector leadership in standards bodies," the letter said.
Further review of the rules implementing the Trump order is expected to include more input from the industry. The letter called on the Commerce department to work with the Department of Homeland Security and the private sector-led ICT Supply Chain Risk Management Task force "to tailor intervention actions to where they are most necessary, and place greater focus on industry-led standards and best practices that provide a positive model for nations working to build a secure, resilient, and innovative connected ecosystem now and in the future".
The statement comes as several European countries have approved or are considering laws allowing greater controls on the telecom networks supply chain. The legislation is based on recommendations from the European Commission, which proposed in early 2020 a 'tool box' to help ensure 5G networks are protected from potential security threats. The EU's cybersecurity agency Enisa started last month at the Commission's request developing a certification scheme specifically for 5G equipment.
