Report Claims Huawei Don’t Pose a Risk to UK Security

Image result for huawei technologies

Huawei is one of the UK’s largest providers of telecoms equipment, with deals in place to provide critical national infrastructure as well as the technology behind services from companies such as BT, EE, Virgin Media, O2 and Sky.

However, concerns have been raised in countries such as the US and Australia about potential links to the Chinese government and the People’s Liberation Army in spite of strong denials from the group.

A cyber security evaluation centre in Banbury UK was established in 2010 by Huawei to take apart the physical equipment and software used in the UK to mitigate risks to national security. In the report for the national security adviser, the centre’s oversight board said the “technical assurance” provided by Banbury was of “sufficient scope and quality to meet its obligations”. Huawei has also pledged further funds to expand the centre.

A management audit by Ernst & Young showed the centre was sufficiently independent from Huawei, which will address concerns about the centre and its staff being fully funded by the Chinese group. Three concerns were identified by the report, although these were rated as “low risk”. They included difficulties in recruiting staff owing to a lack of cyber security skills as well as the reluctance of potential new recruits to complete security clearance. Ernst & Young also found some staff working at the centre without developed vetting clearance, the most comprehensive type of security vetting, although this has now been reduced to just two.


Financial Times: 

« Cyber Insurance: Well Worth it but Beware of Exclusions
Interpol Cyber Research Identifies Malware Threat to Currencies »

Infosecurity Europe
CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

NordLayer

NordLayer

NordLayer is an adaptive network access security solution for modern businesses — from the world’s most trusted cybersecurity brand, Nord Security. 

CYRIN

CYRIN

CYRIN® Cyber Range. Real Tools, Real Attacks, Real Scenarios. See why leading educational institutions and companies in the U.S. have begun to adopt the CYRIN® system.

Jooble

Jooble

Jooble is a job search aggregator operating in 71 countries worldwide. We simplify the job search process by displaying active job ads from major job boards and career sites across the internet.

North Infosec Testing (North IT)

North Infosec Testing (North IT)

North IT (North Infosec Testing) are an award-winning provider of web, software, and application penetration testing.

TÜV SÜD Academy UK

TÜV SÜD Academy UK

TÜV SÜD offers expert-led cybersecurity training to help organisations safeguard their operations and data.

Evidian

Evidian

Evidian, a Bull Group company, is the European leader and one of the major worldwide vendors of identity and access management software.

CyberPolicy

CyberPolicy

CyberPolicy is a cyber protection solution for small businesses. It combines three important components against cyber threats - Cyber Plan, Cybersecurity and Cyber Insurance.

SISSDEN

SISSDEN

SISSDEN will improve cybersecurity through the development of increased awareness and the effective sharing of actionable threat information.

redGuardian

redGuardian

redGuardian is a DDoS mitigation solution available both as a BGP-based service and as an on-premise platform.

SGBox

SGBox

SGBox is a highly flexible and scalable solution for IT security. Choose the modules which your company needs and implement it without any modification to your network infrastructure.

FirstPoint

FirstPoint

FirstPoint has developed the market’s most advanced solution for securing cellular devices, including mobile phones and IoT products, by blocking malicious data leakage.

SOOHO

SOOHO

SOOHO helps to detect security vulnerabilities earlier. Our blockchain security platform audits from smart contracts to on-chain transactions.

CYBRScore

CYBRScore

CYBRScore is a premium, performance-based cyber skills training and assessment provider that quantifies a user’s ability to defend a network.

CentricalCyber

CentricalCyber

CentricalCyber is a cyber risk consultancy and NIST CSF specialist set up to help business leaders better understand and manage cyber risk.

Syxsense

Syxsense

Syxsense brings together endpoint management and security for greater efficiency and collaboration between IT management and security teams.

1Kosmos

1Kosmos

1Kosmos provide Digital Identity and Passwordless Authentication for workforce and customers. Powered by advanced biometrics and blockchain technology.

LiveAction

LiveAction

LiveAction provides end-to-end visibility of network and application performance from a single pane of glass.

Yotta Infrastructure Solutions

Yotta Infrastructure Solutions

Yotta Infrastructure, a Hiranandani group company, provide Datacenter Colocation and Tech Services such as Cloud services, Network & Connectivity, IT Security and IT Management services.

Unisys

Unisys

Unisys is a global information technology company providing industry-focused solutions integrated with leading-edge security to clients in the government, financial services and commercial markets.

HADESS

HADESS

We are "Hadess", a group of cyber security experts and white hat hackers.

appNovi

appNovi

appNovi inventories everything to map the attack surface, identify missing security agents, and prioritize vulnerabilities based on exposure.