{"id":96188,"date":"2025-11-24T17:10:34","date_gmt":"2025-11-24T17:10:34","guid":{"rendered":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/?post_type=gsma_theme_resources&p=96188"},"modified":"2026-05-26T11:46:11","modified_gmt":"2026-05-26T10:46:11","slug":"the-impact-of-cybersecurity-regulation-on-mobile-operators","status":"publish","type":"gsma_theme_resources","link":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/gsma_resources\/the-impact-of-cybersecurity-regulation-on-mobile-operators\/","title":{"rendered":"The Impact of Cybersecurity Regulation on Mobile Operators"},"content":{"rendered":"\n

An executive summary of this resource is also available in Spanish<\/a>.<\/p>\n\n\n\n

This report explores how cybersecurity regulations shape mobile operators’ ability to defend against evolving threats. It highlights the costs, challenges, and opportunities that regulation creates, and shows how well-designed policies can strengthen resilience while poorly designed ones increase risk.<\/p>\n\n\n\n

Cybersecurity is now a foundational pillar of mobile network operations, requiring significant and growing resources. “The Impact of Cybersecurity Regulation on Mobile Operators” report estimates that mobile operators globally spend between $15bn and $19bn annually on their \u201ccore\u201d cybersecurity activities, including technical security functions and threat-monitoring teams. As threats evolve, costs are projected to rise to between $40bn and $42bn by 2030. <\/p>\n\n\n\n

Despite this significant investment, mobile network operators are affected by poorly designed, misaligned, or overly prescriptive regulation, which results in unnecessary costs, diverts resources from genuine risk mitigation, and, in some cases, increase exposure to cyber threats. <\/p>\n\n\n\n

To help legislators and regulators, the report sets out six core principles that they should always consider when shaping cybersecurity policy. Applied consistently, they minimise unnecessary costs for operators, enabling them to focus effort and attention on genuine risks and mitigation. The principles are:<\/p>\n\n\n\n

Harmonisation:<\/strong> Align cybersecurity policy with international standards where possible, to reduce regulatory fragmentation and inconsistency.<\/p>\n\n\n\n

Consistency:<\/strong> Ensure new policies and frameworks are consistent with existing policy to avoid duplication or conflict.<\/p>\n\n\n\n

Risk- and outcome-based:<\/strong> Adopt risk- and outcome-based approaches in the design and implementation of cybersecurity regulation, giving operators flexibility to innovate.<\/p>\n\n\n\n

Collaboration:<\/strong> Promote a collaborative regulatory culture with industry, supported by secure threat intelligence sharing.<\/p>\n\n\n\n

Security-by-design:<\/strong> Encourage a proactive, security-by-design approach to mitigating cyber risks.<\/p>\n\n\n\n

Capacity-building:<\/strong> Strengthen the institutional capacity of cybersecurity authorities to ensure a whole-of-government approach and effective application of policy and regulation.<\/p>\n\n\n\n

Developed in partnership with Frontier Economics, “The Impact of Cybersecurity Regulation on Mobile Operators” draws on economic analysis and operator interviews representing the Africa, Asia Pacific, Europe, Latin America, Middle East and North America regions.<\/p>\n\n\n\n

<\/p>\n","protected":false},"excerpt":{"rendered":"

An executive summary of this resource is also available in Spanish. This report explores how cybersecurity regulations shape mobile operators’ ability to defend against evolving threats. It highlights the costs, challenges, and opportunities that regulation creates, and shows how well-designed policies can strengthen resilience while poorly designed ones increase risk. Cybersecurity is now a foundational […]<\/p>\n","protected":false},"author":111,"featured_media":96194,"template":"","meta":{"image":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/wp-content\/uploads\/2025\/11\/cybersecurty_440x190_17_11-1.png","json":{"gsma_resources_type":"Document","gsma_resources_thumb":"[96194]","gsma_resources_file":"[96255]","gsma_resources_multi":null,"gsma_resources_wgr":null,"gsma_resources_video":"","gsma_resources_image":"null","gsma_resources_url":"","gsma_resources_date":"","gsma_resources_button":""}},"tags":[],"resource_categories":[12171,12172],"algolia_discover_type":[12151],"class_list":["post-96188","gsma_theme_resources","type-gsma_theme_resources","status-publish","has-post-thumbnail","hentry","resource_categories-cybersecurity","resource_categories-online-safety","algolia_discover_type-documents-and-reports"],"yoast_head":"\nThe Impact of Cybersecurity Regulation on Mobile Operators - Public Policy<\/title>\n<meta name=\"description\" content=\"This report explores how cybersecurity regulation shapes the ability of mobile operators to defend against evolving threats.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/gsma_resources\/the-impact-of-cybersecurity-regulation-on-mobile-operators\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"The Impact of Cybersecurity Regulation on Mobile Operators\" \/>\n<meta property=\"og:description\" content=\"This report explores how cybersecurity regulation shapes the ability of mobile operators to defend against evolving threats.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/gsma_resources\/the-impact-of-cybersecurity-regulation-on-mobile-operators\/\" \/>\n<meta property=\"og:site_name\" content=\"Public Policy\" \/>\n<meta property=\"article:modified_time\" content=\"2026-05-26T10:46:11+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/wp-content\/uploads\/2025\/11\/cybersecurty_440x190_17_11-1.png\" \/>\n\t<meta property=\"og:image:width\" content=\"440\" \/>\n\t<meta property=\"og:image:height\" content=\"190\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"2 minutes\" \/>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"The Impact of Cybersecurity Regulation on Mobile Operators - Public Policy","description":"This report explores how cybersecurity regulation shapes the ability of mobile operators to defend against evolving threats.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/gsma_resources\/the-impact-of-cybersecurity-regulation-on-mobile-operators\/","og_locale":"en_US","og_type":"article","og_title":"The Impact of Cybersecurity Regulation on Mobile Operators","og_description":"This report explores how cybersecurity regulation shapes the ability of mobile operators to defend against evolving threats.","og_url":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/gsma_resources\/the-impact-of-cybersecurity-regulation-on-mobile-operators\/","og_site_name":"Public Policy","article_modified_time":"2026-05-26T10:46:11+00:00","og_image":[{"width":440,"height":190,"url":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/wp-content\/uploads\/2025\/11\/cybersecurty_440x190_17_11-1.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/gsma_resources\/the-impact-of-cybersecurity-regulation-on-mobile-operators\/","url":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/gsma_resources\/the-impact-of-cybersecurity-regulation-on-mobile-operators\/","name":"The Impact of Cybersecurity Regulation on Mobile Operators - Public Policy","isPartOf":{"@id":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/gsma_resources\/the-impact-of-cybersecurity-regulation-on-mobile-operators\/#primaryimage"},"image":{"@id":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/gsma_resources\/the-impact-of-cybersecurity-regulation-on-mobile-operators\/#primaryimage"},"thumbnailUrl":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/wp-content\/uploads\/2025\/11\/cybersecurty_440x190_17_11-1.png","datePublished":"2025-11-24T17:10:34+00:00","dateModified":"2026-05-26T10:46:11+00:00","description":"This report explores how cybersecurity regulation shapes the ability of mobile operators to defend against evolving threats.","breadcrumb":{"@id":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/gsma_resources\/the-impact-of-cybersecurity-regulation-on-mobile-operators\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/gsma_resources\/the-impact-of-cybersecurity-regulation-on-mobile-operators\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/gsma_resources\/the-impact-of-cybersecurity-regulation-on-mobile-operators\/#primaryimage","url":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/wp-content\/uploads\/2025\/11\/cybersecurty_440x190_17_11-1.png","contentUrl":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/wp-content\/uploads\/2025\/11\/cybersecurty_440x190_17_11-1.png","width":440,"height":190,"caption":"A person holds a smartphone displaying \"VERIFICATION CODE\" above a numeric keypad, suggesting code entry\u2014a common cybersecurity step. The phone rests over a wooden surface beside a laptop keyboard."},{"@type":"BreadcrumbList","@id":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/gsma_resources\/the-impact-of-cybersecurity-regulation-on-mobile-operators\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/"},{"@type":"ListItem","position":2,"name":"The Impact of Cybersecurity Regulation on Mobile Operators"}]},{"@type":"WebSite","@id":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/#website","url":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/","name":"Public Policy","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"}]}},"cats":[{"term_id":11192,"name":"Child Rights and Protection","slug":"child-rights-and-protection","term_group":0,"term_taxonomy_id":11212,"taxonomy":"resource_categories","description":"","parent":12174,"count":17,"filter":"raw"},{"term_id":11167,"name":"Cross-Border Data Flows","slug":"cross-border-data-flows","term_group":0,"term_taxonomy_id":11187,"taxonomy":"resource_categories","description":"","parent":12174,"count":5,"filter":"raw"},{"term_id":12171,"name":"Cybersecurity","slug":"cybersecurity","term_group":0,"term_taxonomy_id":12191,"taxonomy":"resource_categories","description":"","parent":12174,"count":10,"filter":"raw"},{"term_id":11164,"name":"Data Privacy","slug":"data-privacy","term_group":0,"term_taxonomy_id":11184,"taxonomy":"resource_categories","description":"","parent":12174,"count":27,"filter":"raw"},{"term_id":11170,"name":"Digital Ecosystem Competition","slug":"digital-ecosystem-competition","term_group":0,"term_taxonomy_id":11190,"taxonomy":"resource_categories","description":"","parent":12174,"count":18,"filter":"raw"},{"term_id":12098,"name":"Digital Infrastructure Policy","slug":"digital-infrastructure-policy","term_group":0,"term_taxonomy_id":12118,"taxonomy":"resource_categories","description":"","parent":12174,"count":20,"filter":"raw"},{"term_id":11175,"name":"Electromagnetic Fields (EMF)","slug":"electromagnetic-fields-emf","term_group":0,"term_taxonomy_id":11195,"taxonomy":"resource_categories","description":"","parent":12174,"count":30,"filter":"raw"},{"term_id":12173,"name":"Mobile Investment and Innovation","slug":"mobile-investment-and-innovation","term_group":0,"term_taxonomy_id":12193,"taxonomy":"resource_categories","description":"","parent":12174,"count":26,"filter":"raw"},{"term_id":11161,"name":"Mobile Taxation","slug":"mobile-taxation","term_group":0,"term_taxonomy_id":11181,"taxonomy":"resource_categories","description":"","parent":12174,"count":76,"filter":"raw"},{"term_id":12172,"name":"Online Safety","slug":"online-safety","term_group":0,"term_taxonomy_id":12192,"taxonomy":"resource_categories","description":"","parent":12174,"count":3,"filter":"raw"},{"term_id":12174,"name":"Topic","slug":"topic","term_group":0,"term_taxonomy_id":12194,"taxonomy":"resource_categories","description":"","parent":0,"count":0,"filter":"raw"}],"_links":{"self":[{"href":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/wp-json\/wp\/v2\/gsma_theme_resources\/96188"}],"collection":[{"href":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/wp-json\/wp\/v2\/gsma_theme_resources"}],"about":[{"href":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/wp-json\/wp\/v2\/types\/gsma_theme_resources"}],"author":[{"embeddable":true,"href":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/wp-json\/wp\/v2\/users\/111"}],"version-history":[{"count":10,"href":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/wp-json\/wp\/v2\/gsma_theme_resources\/96188\/revisions"}],"predecessor-version":[{"id":97107,"href":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/wp-json\/wp\/v2\/gsma_theme_resources\/96188\/revisions\/97107"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/wp-json\/wp\/v2\/media\/96194"}],"wp:attachment":[{"href":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/wp-json\/wp\/v2\/media?parent=96188"}],"wp:term":[{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/wp-json\/wp\/v2\/tags?post=96188"},{"taxonomy":"resource_categories","embeddable":true,"href":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/wp-json\/wp\/v2\/resource_categories?post=96188"},{"taxonomy":"algolia_discover_type","embeddable":true,"href":"https:\/\/www.gsma.com\/solutions-and-impact\/connectivity-for-good\/public-policy\/wp-json\/wp\/v2\/algolia_discover_type?post=96188"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}