Report Claims Huawei Don’t Pose a Risk to UK Security

Image result for huawei technologies

Huawei is one of the UK’s largest providers of telecoms equipment, with deals in place to provide critical national infrastructure as well as the technology behind services from companies such as BT, EE, Virgin Media, O2 and Sky.

However, concerns have been raised in countries such as the US and Australia about potential links to the Chinese government and the People’s Liberation Army in spite of strong denials from the group.

A cyber security evaluation centre in Banbury UK was established in 2010 by Huawei to take apart the physical equipment and software used in the UK to mitigate risks to national security. In the report for the national security adviser, the centre’s oversight board said the “technical assurance” provided by Banbury was of “sufficient scope and quality to meet its obligations”. Huawei has also pledged further funds to expand the centre.

A management audit by Ernst & Young showed the centre was sufficiently independent from Huawei, which will address concerns about the centre and its staff being fully funded by the Chinese group. Three concerns were identified by the report, although these were rated as “low risk”. They included difficulties in recruiting staff owing to a lack of cyber security skills as well as the reluctance of potential new recruits to complete security clearance. Ernst & Young also found some staff working at the centre without developed vetting clearance, the most comprehensive type of security vetting, although this has now been reduced to just two.


Financial Times: 

« Cyber Insurance: Well Worth it but Beware of Exclusions
Interpol Cyber Research Identifies Malware Threat to Currencies »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

ManageEngine

ManageEngine

As the IT management division of Zoho Corporation, ManageEngine prioritizes flexible solutions that work for all businesses, regardless of size or budget.

ZenGRC

ZenGRC

ZenGRC - the first, easy-to-use, enterprise-grade information security solution for compliance and risk management - offers businesses efficient control tracking, testing, and enforcement.

IT Governance

IT Governance

IT Governance is a leading global provider of information security solutions. Download our free guide and find out how ISO 27001 can help protect your organisation's information.

Practice Labs

Practice Labs

Practice Labs is an IT competency hub, where live-lab environments give access to real equipment for hands-on practice of essential cybersecurity skills.

CYRIN

CYRIN

CYRIN® Cyber Range. Real Tools, Real Attacks, Real Scenarios. See why leading educational institutions and companies in the U.S. have begun to adopt the CYRIN® system.

Octopus Cybercrime Community

Octopus Cybercrime Community

The Octopus Community is a platform for information sharing and cooperation on cybercrime and electronic evidence.

Integrity360

Integrity360

Integrity360 provide fully managed IT security services as well as security testing, integration, GRC and incident handling services.

Odix

Odix

Odix security software neutralizes file embedded targeted cyber attacks before they enter your organization’s network.

Auxilium Cyber Security

Auxilium Cyber Security

Auxilium Cyber Security is independent information security consultancy company.

TCDI

TCDI

TCDI specializes in computer forensics, eDiscovery and cybersecurity services.

PrivateVPN

PrivateVPN

PrivateVPN is a Virtual Private Network services provider offering secure encrypted access to the internet.

ReFoMa

ReFoMa

ReFoMa is a consultancy and advisory company with a focus on information Security.

NSR

NSR

NSR provide trusted solutions that deliver positive business outcomes for our clients in cybersecurity and data protection challenges.

MainNerve

MainNerve

MainNerve helps secure networks, applications, people, and facilities… enabling businesses to reduce risk and increase their cybersecurity posture.

Avetta

Avetta

Avetta One is the industry’s largest Supply Chain Risk Management (SCRM) platform. It enables clients to manage supply chain risks and suppliers to prove the value of their business.

MyCISO

MyCISO

MyCISO is the World’s first SaaS application that will vastly simplify security management for all.

TokenEx

TokenEx

TokenEx Cloud Security Platform protects sensitive data to strengthen our clients' security postures while future-proofing their operations.

GTT Communications

GTT Communications

GTT are a global network provider that serves thousands of multinational and national enterprise, government and carrier customers with a portfolio of advanced connectivity and security services.

Blue Bastion

Blue Bastion

Don’t give cybercriminals the chance to find weaknesses in your company’s cyber security system. Defend your institution from all attacks from all directions with Blue Bastion.

Foghorn Consulting

Foghorn Consulting

Foghorn can analyze your cloud to enhance performance and security, while reducing costs. Based on AWS’ 6 Pillars, our AWS WAFR Certified Engineers Will Identify Areas of Improvement.

CoGuard

CoGuard

CoGuard is a patented solution that uses AI driven automation to provide fast, cost effective white-box penetration testing, infrastructure audits and infrastructure design services.