Proposals to Update the Telecommunications Security Code of Practice (2022).

What’s Happening 

DSIT has opened a consultation (closing 22 October 2025) on updates to the Telecommunications Security Code of Practice (2022), which underpins the Telecoms Security Act 2021. The Code sets out how providers must secure networks against cyber threats. Updates are proposed to address emerging risks, new technologies, and revised NCSC standards. 

Why Now? 

• Evolving Threats – Nation-state and criminal actors are targeting telecoms with supply chain attacks, API exploits, and SIM-swap fraud. 

  
  

• New Technologies – Adoption of 5G, IoT, eSIMs and cloud-native networks has expanded the attack surface. 

  
  

• Greater Dependency – Connectivity now underpins healthcare, social care, transport, emergency response and economic growth; disruption has higher consequences. 

  
  

• Regulatory Alignment – Changes align with the NCSC Cyber Assessment Framework (CAF v4.0) and standards used across other critical sectors. 

  
  

Key Proposals 

• Clearer definitions of security-critical functions, service accounts and third-party administrators.

  
  

• Stronger risk-based approach, encouraging early adoption. 

  
  

• New measures: 

  
  

  • Privileged Access Workstations (PAWs). 

  • Safeguards against eSIM and SIM-swap fraud. 

  • Tougher API and automation pipeline security. 

  • Continuous, risk-based testing. 

    
    

• Revised Annex C aligned with CAF v4.0. 

  
  

Why It Matters 

• Local Authorities – Smart infrastructure and IoT rollouts must meet higher security baselines. 

  
  

• Operators & Alt-Nets – Compliance could add cost and complexity, particularly for smaller providers. 

  
  

• Investors – Security compliance becomes a material due diligence factor, affecting valuations and risk profiles. 

How Intelligens Consulting Can Help 

• Translate policy into practical implications for projects and contracts. 

  
  

• Provide readiness assessments against new standards. 

  
  

• Support consultation responses and stakeholder engagement. 

  
  

• Deliver horizon scanning on related policy shifts (e.g. forthcoming Cyber Security & Resilience Bill). 

  
  
  
  

📩 Contact us to discuss how these changes may impact your digital or telecoms strategy. Consultation closes 22 October 2025. 

Iqbal Singh Bedi, Managing Partner, Email: info@intelligensconsulting.com | Website: www.intelligensconsulting.com