The UK’s Huawei Cyber Security Evaluation Centre (HCSEC) Oversight Board issued its sixth annual report concerning risks arising from the involvement of Huawei in parts of the
United Kingdom’s critical national infrastructure. The report discusses a security flaw of “national significance” with currently deployed equipment and well as systemic problems in the way Huawei has mitigated previous problems.
The HCSEC report states it “has not yet seen anything to give it confidence in Huawei’s capacity to successfully complete the elements of its transformation programme that it has proposed as a means of addressing these underlying defects. The Board will require sustained evidence of better software engineering and cyber security quality verified by HCSEC and NCSC.”
In addition, the Oversight Board stated it “can only provide limited assurance that all risks to UK national security from Huawei’s involvement in the UK’s critical networks can be sufficiently mitigated long-term.”
