The Communications Act 2003 The UK Telecoms Supply Chain Review
In 2018-2019, the Government carried out a review of UK telecoms networks’ supply chain arrangements. Conclusions of the review were published in the UK Telecoms Supply Chain Review Report in July 2019.
	The Review identified that inadequate industry security practices were driven by a lack of incentives to manage risk, including the inability of the regulatory framework to drive improvements in cyber security. It concluded that higher standards and practices of cyber security are required across the telecoms sector as a technical pre-condition for secure 5G and full fibre networks.
	The Review called for a new, more robust telecoms security framework, that will meet security challenges both now and in the future whilst ensuring the timely roll-out of the UK’s critical digital infrastructure. It suggested that as technologies grow and evolve the UK must have a security framework that is fit for purpose and ensures the UK’s telecoms critical national infrastructure remains safe and secure both now and in the future.
	The UK Telecoms Supply Chain Review Report explained that the Government would establish a new robust security framework for the UK telecoms sector, marking a significant shift from the current model. The new framework is necessary to safeguard the UK’s national security interests and will build on existing capabilities. It will provide clarity to industry, whilst providing the necessary flexibility and powers for the Government to respond appropriately as risks, threats and technologies change.
	The Report also explained that the Government would create new powers to manage the risks posed by high risk vendors. High risk vendors are those who pose greater security and resilience risks to UK telecoms networks. This new framework will help to ensure that telecoms providers are managing the security risks posed by all suppliers.
	The final conclusions of the Review, which were agreed by the National Security Council in January 2020, set out the need for new national security powers to control the presence of high risk vendors in UK networks.