It's almost nine years since Chinese networking and telecommunications giant Huawei entered into an agreement with the UK government to permit extensive security reviews of Huawei’s hardware and software—a move intended to allay fears that the company posed a security risk to the UK’s networks. Since then, the Huawei Cyber Security Evaluation Centre (HCSEC) has given UK officials a window into the company’s information security practices. And UK officials haven’t necessarily liked what they’ve seen.
In a report last week, the HCSEC Oversight Board, which comprised officials from the National Cyber Security Centre, GCHQ and other agencies, as well as a senior executive from Huawei, warned that Huawei had failed to make long-promised changes to its software development and engineering practices needed to improve security.
“HCSEC’s work has continued to identify concerning issues in Huawei’s approach to software development bringing significantly increased risk to UK operators,” board members noted. “No material progress” had been made in correcting those problems since they were noted last year.
In addition, audits and reviews by the HCSEC had found “further significant technical issues in Huawei’s engineering practices,” the board noted. While Huawei had promised to make major investments in correcting its problems and promising to invest $2 billion in security engineering improvements over five years, the board remained unconvinced based on their review:
At present, the board has not yet seen anything to give it confidence in Huawei’s capacity to successfully complete the elements of its transformation programme. The board will require sustained evidence of better software engineering and cybersecurity quality verified by HCSEC and NCSC. Overall, the board can only provide limited assurance that all risks to UK national security from Huawei’s involvement in the UK’s critical networks can be sufficiently mitigated long-term.
The full oversight board report can be seen here.
Sweat in peace, don’t bleed in war…
Whether you believe it was General Patton, General Shwarzkopf or another historic figure who coined these words – the point it makes has never been more relevant than today in the world of business, as well as in the mindset of the military. Even if the violent imagery doesn’t reflect your business leadership style, please read on, because we all need to consider how strategic neglect can lose business fast - faster than ever in fact. The same impetus that can create business value quickly from nothing can return it to dust with a speed that defies human understanding.read more
Smartphone, Dumb Owner? Strengthen Your Mobile Security
With the growth in the use of smartphones and tablets in the workplace and the increase in personal use for such things as online banking, cybercriminals are turning their nefarious attention to mobile devices. Internet security giant Symantec has revealed that mobile malware variants soared by 54 per cent in 2017 when compared to the previous year.read more
Prepare Against Cyberattacks - There Are Resources Available
It is foolish, in the mostly digital world we now live in, to assume that there is someone available to bail you out. Quite simply the more digitalised we get, the more self-sufficient we need to become. Protecting our assets online has never been such an important aspect of any business. There are a multitude of sites, services and products available to help, Government Agencies, the police, National Cyber Security Centre all willing to help and spraying the internet with great advice.read more
IT Managers Overwhelmed Fighting Cyberattacks - Sophos
A global survey, The Impossible Puzzle of Cybersecurity, carried out by Sophos reveals IT managers are inundated with cyberattacks coming from all directions and are struggling to keep up due to a lack of security expertise, budget and up to date technology.read more