FCC Chairwoman Proposes Yearly Network Security Certification

• December 13, 2024

• News

• Industry News

• Share

After recent reports surfaced involving an intrusion by foreign actors into U.S. communications networks, FCC Chairwoman Jessica Rosenworcel proposed urgent action to safeguard the nation's communications systems from real and present cybersecurity threats. The Chairwoman recently announced that the Federal Communications Commission will act to ensure telecommunication companies are required to secure their networks.

Chairwoman Rosenworcel has shared a draft Declaratory Ruling finding that section 105 of Communications Assistance for Law Enforcement Act ("CALEA") affirmatively requires telecommunications carriers to secure their networks from unlawful access or interception of communications. That action is accompanied by a proposal that would require communications service providers to submit an annual certification to the FCC attesting that they have created, updated, and implemented a cybersecurity risk management plan, which would strengthen communications from future cyberattacks.

"The cybersecurity of our nation's communications critical infrastructure is essential to promoting national security, public safety, and economic security," said Chairwoman Jessica Rosenworcel. "As technology continues to advance, so does the capabilities of adversaries, which means the U.S. must adapt and reinforce our defenses. While the Commission's counterparts in the intelligence community are determining the scope and impact of the Salt Typhoon attack, we need to put in place a modern framework to help companies secure their networks and better prevent and respond to cyberattacks in the future."

If adopted, this ruling would take effect immediately. In addition, the draft Notice of Proposed Rulemaking would seek comment on cybersecurity risk management requirements for a wide range of communications providers. The proposal would also seek comment on additional ways to strengthen the cybersecurity posture of communications systems and services.

Sources:

docs.fcc.gov/public/attachments/DOC-408013A1.pdf

lightreading.com/security/fcc-chair-proposes-yearly-network-security-certification