Definition of the national cybersecurity certification scheme for 5G network devices

SZTFH Decree No .../... (…) of the Supervisory Authority for Regulatory Affairs on a national cybersecurity certification scheme for 5G network devices

The Draft defines the national cybersecurity certification scheme for 5G network devices (hereinafter referred to as the certification scheme), which lays down basic security requirements for 5G network devices.

The application of the certification scheme is voluntary; unless otherwise provided for in EU or Hungarian legislation, the making available on the market or use of the 5G network device is not subject to the possession of a national cybersecurity certificate issued on the basis of the certification scheme.
The certification scheme contains requirements for the “high” assurance level pursuant to the Cyber Security Act, therefore conformity self-assessment cannot be carried out on the basis thereof.
The compliance assessment was carried out using the Network Equipment Security Assurance Specification cybersecurity assessment framework jointly developed by the Groupe Speciale Mobile Association and the Third Generation Partnership Project (hereinafter: NESAS) and the German national scheme “Network Equipment Security Assurance Scheme Cybersecurity Certification Scheme – German Implementation” (NESAS CCS-GI). The certification scheme, on the basis of NESAS, includes both process and product assessments.