{"id":10239,"date":"2024-10-03T13:57:25","date_gmt":"2024-10-03T12:57:25","guid":{"rendered":"https:\/\/www.gsma.com\/solutions-and-impact\/technologies\/security\/?page_id=10239"},"modified":"2024-12-19T14:35:56","modified_gmt":"2024-12-19T14:35:56","slug":"cybersecurity-risk-management","status":"publish","type":"page","link":"https:\/\/www.gsma.com\/solutions-and-impact\/technologies\/security\/cybersecurity-knowledge-base\/cybersecurity-risk-management\/","title":{"rendered":"Cybersecurity risk management"},"content":{"rendered":"\n<div class=\"wp-block-gsma-header-group header-group_block gsma-load-hidden\">\n<div class=\"wp-block-group header-group_container gsma-load-hidden\"><div class=\"wp-block-group__inner-container is-layout-flow wp-block-group-is-layout-flow\">\n<h1 class=\"wp-block-heading header-group_title\" id=\"h-cybersecurity-risk-management\">Cybersecurity risk management<\/h1>\n\n\n\n<h3 class=\"wp-block-heading header-group_sub-title\" id=\"h-key-documents-for-cybersecurity-risk-management\">Key documents for cybersecurity risk management <\/h3>\n<\/div><\/div>\n<\/div>\n\n\n\n<p>Cybersecurity risk management is essential for mobile network operators to maintain secure infrastructures. The GSMA offers frameworks like the Mobile Threat Intelligence Framework (MoTIF) to help organisations understand how adversaries attack mobile networks. By analysing tactics, techniques, and procedures (TTPs), operators can create strategies to manage and reduce risks. Key documents on this page offer baseline security controls and threat intelligence, enabling operators to establish strong cybersecurity risk management practices.<\/p>\n\n\n\n<p>GSMA members can access resources on security risks related to mobile technologies, vulnerability disclosures, and risk assessment frameworks. This page also features guides on identifying threats and implementing quantum-safe technology, ensuring operators stay ahead of future challenges. Using this critical information is essential for staying compliant and protecting networks and customer data from sophisticated cyber threats.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-related-documents\">Related documents<\/h3>\n\n\n\n<style>\n        table {\n            width: 100%;\n            border-collapse: collapse;\n        }\n        th {\n            background-color: #dc002b; \/* Custom red color *\/\n            color: white;\n            padding: 8px;\n            font-weight: bold; \/* Make column headers bold *\/\n        }\n        td {\n            padding: 8px;\n            text-align: left;\n        }\n        tr:nth-child(odd) {\n            background-color: white; \/* White for odd rows *\/\n        }\n        tr:nth-child(even) {\n            background-color: #f1f1f0; \/* Light grey for even rows *\/\n        }\n        img.download-icon {\n            width: 16px;\n            height: 16px;\n            vertical-align: middle;\n        }\n<\/style>\n\n\n<table>\n<head>\n\n    <tr>\n        <th>Document<\/th>\n        <th>Description<\/th>\n        <th>Access<\/th>\n    <\/tr>\n<\/head>\n<body>\n    <tr>\n        <td><a href=\"https:\/\/www.gsma.com\/solutions-and-impact\/technologies\/security\/gsma_resources\/fs-57-mobile-threat-intelligence-framework-motif-principles\/\" target=\"_blank\" rel=\"noopener\">MoTIF Framework (FS.57)<\/a><\/td>\n        <td>The Mobile Threat Intelligence Framework (MoTIF) is a framework to describe how adversaries attack and exploit mobile networks by presenting the tactics, techniques and procedures (TTPs) that are used.<\/td>\n        <td>Public <a href=\"https:\/\/www.gsma.com\/solutions-and-impact\/technologies\/security\/gsma_resources\/fs-57-mobile-threat-intelligence-framework-motif-principles\/\" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" src=\"https:\/\/www.gsma.com\/solutions-and-impact\/technologies\/security\/wp-content\/uploads\/2024\/09\/GSMA-red-download-icon_100x100_02.09.24.png\" alt=\"Download\" class=\"download-icon\"><\/a><\/td>\n    <\/tr>\n    <tr>\n        <td><a href=\"https:\/\/www.gsma.com\/solutions-and-impact\/technologies\/security\/gsma_resources\/fs-31-gsma-baseline-security-controls\/\" target=\"_blank\" rel=\"noopener\">Baseline Controls (FS.31)<\/a><\/td>\n        <td>The GSMA provides a comprehensive set of baseline security controls to help operators understand and establish a strong security posture, helping to improve network security and resilience.<\/td>\n        <td>Public <a href=\"https:\/\/www.gsma.com\/solutions-and-impact\/technologies\/security\/gsma_resources\/fs-31-gsma-baseline-security-controls\/\" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" src=\"https:\/\/www.gsma.com\/solutions-and-impact\/technologies\/security\/wp-content\/uploads\/2024\/09\/GSMA-red-download-icon_100x100_02.09.24.png\" alt=\"Download\" class=\"download-icon\"><\/a><\/td>\n    <\/tr>\n    <tr>\n        <td>5G Fraud (FS.39)<\/td>\n        <td>This guide identifies fraud risks associated with 5G technologies and services and provides recommendations to mitigate them. It is tailored for GSMA members, helping them prepare for and tackle emerging fraud challenges.<\/td>\n        <td><a href=\"https:\/\/www.gsma.com\/get-involved\/gsma-membership\/make-a-difference\/member-gateway\/\" target=\"_blank\" rel=\"noopener\">Members only<\/a><\/td>\n    <\/tr>\n    <tr>\n        <td>Security Manual (FS.30)<\/td>\n        <td>For GSMA members, this manual outlines key security threats to mobile networks. By highlighting evidenced risks, it enables operators to protect their infrastructure and customers more effectively.<\/td>\n        <td><a href=\"https:\/\/www.gsma.com\/get-involved\/gsma-membership\/make-a-difference\/member-gateway\/\" target=\"_blank\" rel=\"noopener\">Members only<\/a><\/td>\n    <\/tr>\n    <tr>\n        <td>Fraud Manual (FF.21)<\/td>\n        <td>This manual offers a detailed guide to various types of fraud affecting mobile networks. It helps GSMA members identify areas of potential fraudulent exposure and effective preventative actions.<\/td>\n        <td><a href=\"https:\/\/www.gsma.com\/get-involved\/gsma-membership\/make-a-difference\/member-gateway\/\" target=\"_blank\" rel=\"noopener\">Members only<\/a><\/td>\n    <\/tr>\n    <tr>\n        <td><a href=\"https:\/\/www.gsma.com\/solutions-and-impact\/technologies\/security\/gsma_resources\/5g-security-guide-version-3-0\/\" target=\"_blank\" rel=\"noopener\">5G Security (FS.40)<\/a><\/td>\n        <td>This document provides a comprehensive look at 5G security developments. It provides essential information, references and insights needed to adapt to the rollout of evolving technologies.<\/td>\n        <td>Public <a href=\"https:\/\/www.gsma.com\/solutions-and-impact\/technologies\/security\/gsma_resources\/5g-security-guide-version-3-0\/\" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" src=\"https:\/\/www.gsma.com\/solutions-and-impact\/technologies\/security\/wp-content\/uploads\/2024\/09\/GSMA-red-download-icon_100x100_02.09.24.png\" alt=\"Download\" class=\"download-icon\"><\/a><\/td>\n    <\/tr>\n    <tr>\n        <td><a href=\"https:\/\/www.gsma.com\/solutions-and-impact\/technologies\/security\/gsma_resources\/fs-23-gsma-coordinated-vulnerability-disclosure-program-version-4-1\/\" target=\"_blank\" rel=\"noopener\">Coordinated Vulnerability Disclosure (FS.23)<\/a><\/td>\n        <td>This document describes the GSMA&#8217;s CVD programme, which enables security researchers to report security vulnerabilities. This coordinated process drives action to address discovered security weaknesses, improving overall cybersecurity levels.<\/td>\n        <td>Public <a href=\"https:\/\/www.gsma.com\/solutions-and-impact\/technologies\/security\/gsma_resources\/fs-23-gsma-coordinated-vulnerability-disclosure-program-version-4-1\/\" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" src=\"https:\/\/www.gsma.com\/solutions-and-impact\/technologies\/security\/wp-content\/uploads\/2024\/09\/GSMA-red-download-icon_100x100_02.09.24.png\" alt=\"Download\" class=\"download-icon\"><\/a><\/td>\n    <\/tr>\n    <tr>\n        <td><a href=\"https:\/\/www.gsma.com\/newsroom\/wp-content\/uploads\/PQ.1-Post-Quantum-Telco-Network-Impact-Assessment-Whitepaper-Version1.0.pdf\" target=\"_blank\" rel=\"noopener\">Post Quantum Telco Network Impact Assessment  (PQ.01)<\/a><\/td>\n        <td>This report analyses the dependencies and timelines for the telecom industry\u2019s shift to quantum-safe technologies. In addition, it outlines actionable steps that operators can take to ensure a smooth and secure transition.<\/td>\n        <td>Public <a href=\"https:\/\/www.gsma.com\/newsroom\/wp-content\/uploads\/PQ.1-Post-Quantum-Telco-Network-Impact-Assessment-Whitepaper-Version1.0.pdf\" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" src=\"https:\/\/www.gsma.com\/solutions-and-impact\/technologies\/security\/wp-content\/uploads\/2024\/09\/GSMA-red-download-icon_100x100_02.09.24.png\" alt=\"Download\" class=\"download-icon\"><\/a><\/td>\n    <\/tr>\n    <tr>\n        <td><a href=\"https:\/\/www.gsma.com\/get-involved\/working-groups\/wp-content\/uploads\/2023\/09\/Guidelines-for-Quantum-Risk-Management-for-Telco-v1.0.pdf\" target=\"_blank\" rel=\"noopener\">Guidelines for Quantum Risk Management for Telco (PQ.02)<\/a><\/td>\n        <td>By focusing on cryptanalytic risks, this document shows how to adapt traditional risk assessment frameworks for the telecom sector. For instance, it uses relevant use cases to offer operators tailored guidance.<\/td>\n        <td>Public <a href=\"https:\/\/www.gsma.com\/get-involved\/working-groups\/wp-content\/uploads\/2023\/09\/Guidelines-for-Quantum-Risk-Management-for-Telco-v1.0.pdf\" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" src=\"https:\/\/www.gsma.com\/solutions-and-impact\/technologies\/security\/wp-content\/uploads\/2024\/09\/GSMA-red-download-icon_100x100_02.09.24.png\" alt=\"Download\" class=\"download-icon\"><\/a><\/td>\n    <\/tr>\n    <tr>\n        <td><a href=\"https:\/\/www.gsma.com\/newsroom\/gsma_resources\/pq-03-post-quantum-cryptography-guidelines-for-telecom-use-cases\/\" target=\"_blank\" rel=\"noopener\">Post Quantum Cryptography Guidelines for Telecom Use Cases (PQ.03)<\/a><\/td>\n        <td>For stakeholders planning the transition toward quantum-safe cryptography, this document provides best practice guidelines. Ultimately, it supports long-term cybersecurity strategies within the telecom ecosystem.<\/td>\n        <td>Public <a href=\"https:\/\/www.gsma.com\/newsroom\/gsma_resources\/pq-03-post-quantum-cryptography-guidelines-for-telecom-use-cases\/\" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" src=\"https:\/\/www.gsma.com\/solutions-and-impact\/technologies\/security\/wp-content\/uploads\/2024\/09\/GSMA-red-download-icon_100x100_02.09.24.png\" alt=\"Download\" class=\"download-icon\"><\/a><\/td>\n    <\/tr>\n    <tr>\n        <td><a href=\"https:\/\/www.gsma.com\/solutions-and-impact\/technologies\/security\/wp-content\/uploads\/2020\/03\/FS.32-v2.0.pdf\" target=\"_blank\" rel=\"noopener\">T-ISAC Service Offering (FS.32)<\/a><\/td>\n        <td>This document outlines the policy, process and functionality of the GSMA&#8217;s Telecommunication Information Sharing and Analysis Centre (T-ISAC) to facilitate the sharing of threat information in a trusted environment.<\/td>\n        <td>Public <a href=\"https:\/\/www.gsma.com\/solutions-and-impact\/technologies\/security\/wp-content\/uploads\/2020\/03\/FS.32-v2.0.pdf\" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" src=\"https:\/\/www.gsma.com\/solutions-and-impact\/technologies\/security\/wp-content\/uploads\/2024\/09\/GSMA-red-download-icon_100x100_02.09.24.png\" alt=\"Download\" class=\"download-icon\"><\/a><\/td>\n    <\/tr>\n    <tr>\n        <td>Artificial Intelligence Security Guidelines (FS.49)<\/td>\n        <td>This document provides GSMA members with security guidelines that are focussed on risks related to AI technology. It also outlines mitigation measures that operators should implement to securely run AI applications.<\/td>\n        <td><a href=\"https:\/\/www.gsma.com\/get-involved\/gsma-membership\/make-a-difference\/member-gateway\/\" target=\"_blank\" rel=\"noopener\">Members only<\/a><\/td>\n    <\/tr>\n<\/body>\n<\/table>\n\n\n\n<p><em>Please note, resources marked &#8216;Members only&#8217; can only be accessed by GSMA members<\/em><\/p>\n\n\n\n<p><\/p>\n\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\">\n<div class=\"wp-block-button\"><a class=\"wp-block-button__link wp-element-button\" href=\"https:\/\/www.gsma.com\/solutions-and-impact\/technologies\/security\/cybersecurity-knowledge-base\/\">Back to Cybersecurity Knowledge base<\/a><\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Cybersecurity risk management is essential for mobile network operators to maintain secure infrastructures. The GSMA offers frameworks like the Mobile Threat Intelligence Framework (MoTIF) to help organisations understand how adversaries attack mobile networks. By analysing tactics, techniques, and procedures (TTPs), operators can create strategies to manage and reduce risks. Key documents on this page offer [&hellip;]<\/p>\n","protected":false},"author":49,"featured_media":8255,"parent":9965,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","footnotes":""},"tags":[],"class_list":["post-10239","page","type-page","status-publish","has-post-thumbnail","hentry"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v24.3 (Yoast SEO v24.3) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Cybersecurity risk management - GSMA Security<\/title>\n<meta name=\"description\" content=\"Cybersecurity risk management is essential for mobile network operators to maintain secure infrastructures.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.gsma.com\/solutions-and-impact\/technologies\/security\/cybersecurity-knowledge-base\/cybersecurity-risk-management\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Cybersecurity risk management - GSMA Security\" \/>\n<meta property=\"og:description\" content=\"Cybersecurity risk management is essential for mobile networks security.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.gsma.com\/solutions-and-impact\/technologies\/security\/cybersecurity-knowledge-base\/cybersecurity-risk-management\/\" \/>\n<meta property=\"og:site_name\" content=\"Security\" \/>\n<meta property=\"article:modified_time\" content=\"2024-12-19T14:35:56+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.gsma.com\/solutions-and-impact\/technologies\/security\/wp-content\/uploads\/2024\/05\/KB_616x450.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"616\" \/>\n\t<meta property=\"og:image:height\" content=\"450\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:title\" content=\"Cybersecurity risk management - GSMA Security\" \/>\n<meta name=\"twitter:description\" content=\"Cybersecurity risk management is essential for mobile network operators to maintain secure infrastructures.\" \/>\n<meta name=\"twitter:label1\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"5 minutes\" \/>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Cybersecurity risk management - GSMA Security","description":"Cybersecurity risk management is essential for mobile network operators to maintain secure infrastructures.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.gsma.com\/solutions-and-impact\/technologies\/security\/cybersecurity-knowledge-base\/cybersecurity-risk-management\/","og_locale":"en_GB","og_type":"article","og_title":"Cybersecurity risk management - GSMA Security","og_description":"Cybersecurity risk management is essential for mobile networks security.","og_url":"https:\/\/www.gsma.com\/solutions-and-impact\/technologies\/security\/cybersecurity-knowledge-base\/cybersecurity-risk-management\/","og_site_name":"Security","article_modified_time":"2024-12-19T14:35:56+00:00","og_image":[{"width":616,"height":450,"url":"https:\/\/www.gsma.com\/solutions-and-impact\/technologies\/security\/wp-content\/uploads\/2024\/05\/KB_616x450.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_title":"Cybersecurity risk management - GSMA Security","twitter_description":"Cybersecurity risk management is essential for mobile network operators to maintain secure infrastructures.","twitter_misc":{"Estimated reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.gsma.com\/solutions-and-impact\/technologies\/security\/cybersecurity-knowledge-base\/cybersecurity-risk-management\/","url":"https:\/\/www.gsma.com\/solutions-and-impact\/technologies\/security\/cybersecurity-knowledge-base\/cybersecurity-risk-management\/","name":"Cybersecurity risk management - GSMA Security","isPartOf":{"@id":"https:\/\/www.gsma.com\/solutions-and-impact\/technologies\/security\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.gsma.com\/solutions-and-impact\/technologies\/security\/cybersecurity-knowledge-base\/cybersecurity-risk-management\/#primaryimage"},"image":{"@id":"https:\/\/www.gsma.com\/solutions-and-impact\/technologies\/security\/cybersecurity-knowledge-base\/cybersecurity-risk-management\/#primaryimage"},"thumbnailUrl":"https:\/\/www.gsma.com\/solutions-and-impact\/technologies\/security\/wp-content\/uploads\/2024\/05\/KB_616x450.jpg","datePublished":"2024-10-03T12:57:25+00:00","dateModified":"2024-12-19T14:35:56+00:00","description":"Cybersecurity risk management is essential for mobile network operators to maintain secure infrastructures.","breadcrumb":{"@id":"https:\/\/www.gsma.com\/solutions-and-impact\/technologies\/security\/cybersecurity-knowledge-base\/cybersecurity-risk-management\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.gsma.com\/solutions-and-impact\/technologies\/security\/cybersecurity-knowledge-base\/cybersecurity-risk-management\/"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.gsma.com\/solutions-and-impact\/technologies\/security\/cybersecurity-knowledge-base\/cybersecurity-risk-management\/#primaryimage","url":"https:\/\/www.gsma.com\/solutions-and-impact\/technologies\/security\/wp-content\/uploads\/2024\/05\/KB_616x450.jpg","contentUrl":"https:\/\/www.gsma.com\/solutions-and-impact\/technologies\/security\/wp-content\/uploads\/2024\/05\/KB_616x450.jpg","width":616,"height":450,"caption":"cybersecurity Knowledge Base"},{"@type":"BreadcrumbList","@id":"https:\/\/www.gsma.com\/solutions-and-impact\/technologies\/security\/cybersecurity-knowledge-base\/cybersecurity-risk-management\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Cybersecurity Knowledge Base","item":"https:\/\/www.gsma.com\/solutions-and-impact\/technologies\/security\/cybersecurity-knowledge-base\/"},{"@type":"ListItem","position":2,"name":"Cybersecurity risk management"}]},{"@type":"WebSite","@id":"https:\/\/www.gsma.com\/solutions-and-impact\/technologies\/security\/#website","url":"https:\/\/www.gsma.com\/solutions-and-impact\/technologies\/security\/","name":"Security","description":"GSMA Security","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.gsma.com\/solutions-and-impact\/technologies\/security\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"}]}},"_links":{"self":[{"href":"https:\/\/www.gsma.com\/solutions-and-impact\/technologies\/security\/wp-json\/wp\/v2\/pages\/10239","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.gsma.com\/solutions-and-impact\/technologies\/security\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.gsma.com\/solutions-and-impact\/technologies\/security\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.gsma.com\/solutions-and-impact\/technologies\/security\/wp-json\/wp\/v2\/users\/49"}],"replies":[{"embeddable":true,"href":"https:\/\/www.gsma.com\/solutions-and-impact\/technologies\/security\/wp-json\/wp\/v2\/comments?post=10239"}],"version-history":[{"count":50,"href":"https:\/\/www.gsma.com\/solutions-and-impact\/technologies\/security\/wp-json\/wp\/v2\/pages\/10239\/revisions"}],"predecessor-version":[{"id":11513,"href":"https:\/\/www.gsma.com\/solutions-and-impact\/technologies\/security\/wp-json\/wp\/v2\/pages\/10239\/revisions\/11513"}],"up":[{"embeddable":true,"href":"https:\/\/www.gsma.com\/solutions-and-impact\/technologies\/security\/wp-json\/wp\/v2\/pages\/9965"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.gsma.com\/solutions-and-impact\/technologies\/security\/wp-json\/wp\/v2\/media\/8255"}],"wp:attachment":[{"href":"https:\/\/www.gsma.com\/solutions-and-impact\/technologies\/security\/wp-json\/wp\/v2\/media?parent=10239"}],"wp:term":[{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.gsma.com\/solutions-and-impact\/technologies\/security\/wp-json\/wp\/v2\/tags?post=10239"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}