Governance Briefing — EU 5G cybersecurity toolbox progress update released
The European Commission and ENISA reported member-state progress implementing the EU 5G cybersecurity toolbox on July 24, 2020, noting supply chain risk controls and vendor restrictions advancing ahead of 2020 deadlines.
Executive briefing: The Commission’s progress report on the 5G cybersecurity toolbox shows EU member states moving from strategic plans into execution, including high-risk vendor restrictions, certification schemes, and coordinated monitoring structures.Progress report §§2–4
Programme steps
- Update procurement criteria. Ensure 5G vendor selection embeds risk-based restrictions consistent with the toolbox’s strategic and technical measures.
- Strengthen assurance. Prepare to adopt EU-wide security certification for 5G components as ENISA advances schemes referenced in the report.
- Evidence governance. Document how board oversight and national supervisory engagement will monitor 5G supply-chain risks, aligning with the report’s call for continuous review.
Sources
- Report on Member States’ progress in implementing the EU Toolbox on 5G Cybersecurity
- EU Toolbox of risk mitigating measures for 5G
Continue in the Governance pillar
Return to the hub for curated research and deep-dive guides.
Latest guides
-
Public-Sector Governance Alignment Playbook — Zeph Tech
Align OMB Circular A-123, GAO Green Book, OMB M-24-10 AI guidance, EU public sector directives, and UK Orange Book with digital accountability, risk management, and service…
-
Third-Party Governance Control Blueprint — Zeph Tech
Deliver OCC, Federal Reserve, PRA, EBA, DORA, MAS, and OSFI third-party governance requirements through board reporting, lifecycle controls, and resilience evidence.
-
Governance, Risk, and Oversight Playbook — Zeph Tech
Operationalise board-level governance, risk oversight, and resilience reporting aligned with Basel Committee principles, ECB supervisory expectations, U.S. SR 21-3, and OCC…




