"Chinese danger", the government prepares methodology for the security of 5G network equipment

2025-11-14 07:23:00, Aktualitet CNA

"Chinese danger", the government prepares methodology for the security

The Albanian government has prepared a draft decision "On the approval of the methodology for assessing the risk profile at the national level of suppliers and providers of 5G network equipment".

The draft, prepared by the Ministry of Infrastructure, proposes to the Council of Ministers the approval of a detailed methodology for assessing the risk profile of suppliers and providers of 5G network equipment, as well as critical components and sensitive parts of these networks.

The draft regulation is based on the need to ensure the cybersecurity of national strategic infrastructures, in accordance with national legislation and European Union recommendations on the security of 5G networks.

According to the draft, to assess the risk profile of suppliers and providers of network equipment, critical components and sensitive parts of 5G, the Electronic and Postal Communications Authority (AKEP) will ask operators who the suppliers are for each network component; what is the country of origin from which the supplier or suppliers are controlled; whether the network equipment is certified according to the EU cybersecurity certification scheme or the national cybersecurity certification scheme approved by Decision of the Council of Ministers under the law on cybersecurity; whether the supplier or provider of network equipment is certified according to ISO/IEC security standards issued by bodies accredited/recognized by Albanian authorities or in the EU, etc.

5G network operators must submit the requested information to AKEP no later than 30 days from the receipt of the request. For the first assessment after the entry into force of the decision in question, the deadline for submitting the information is no more than 60 days from the receipt of the request.

AKEP, from the moment of receiving the information submitted by the operators, must conduct a detailed assessment of the information within 90 calendar days.

In the assessment process, AKEP shall also take into account information from periodic reports by entrepreneurs or the responsible authority on cyber incidents that have occurred during the last year, as well as reports that may have been made by entrepreneurs. Where necessary, AKEP shall cooperate with the competent security authorities for the assessment of the specified information.

Technical and specific measures for the security of 5G networks in any case do not bypass the requirements for security measures for networks and services according to the provisions of the law "On electronic communications in the Republic of Albania".

AKEP, after consulting with the National Cyber ??Security Authority, makes a detailed assessment of the security measures taken by the operator, the level of risk identified, as well as an assessment of the plan of measures and the time for their possible correction. The analysis carried out is made available to the operator for comment.

In the event that the plan or measures proposed by the operators prove insufficient, AKEP, in cooperation with AKSK, submits to the competent minister a proposal for the imposition of restrictive measures, the time of their implementation, as well as a proposal for a compensation scheme if necessary.

These measures may include the removal or replacement of hazardous equipment within specified deadlines, as well as, where appropriate, the application of a compensation scheme that is provided for by law.

The draft law stipulates that the Minister provides an opinion on the proposal within 30 days, while AKEP makes the final decision on the restrictive measures and the manner of their implementation and is also responsible for monitoring the implementation of the approved measures and periodically reports to the responsible minister and AKSK.

The measures include the removal or replacement of high-risk equipment within a specified period. Also, network operators, before making new investments related to equipment as defined in the Decision of the Council of Ministers “On the approval of the list of critical components and sensitive parts of 5G networks”, must notify AKEP in advance./ Monitor