电信运营商ICT供应链安全风险评估方法研究

打开文本图片集

关键词：电信运营商；ICT供应链；风险评估

doi：10.3969/J.ISSN.1672-7274.2025.05.065

中图分类号：TP393.0 文献标志码：A 文章编码：1672-7274（2025）05-0194-03

Abstract： As the swift expansion of digital and global 5G services by telecommunications operators accelerates， the integration of new technologies and services through mobile terminals has become ubiquitous in daily life. This widespread adoption brings with itaheightened array of security risks for the telecommunications industry， particularly within the realm of its Information and Communication Technology （ICT） supply chain. Against this backdrop，this paper introducesa suiteofrational and eficacious securityrisk assessment methodologies，specifically tailored to enhance the network and data securityof telecommunications operators' ICT supply chains.The paper meticulously outlines the principal security risks confronting these supply chains，from scoping assessments and risk identification to thorough analysis and the development of strategic responses.It further assesss the vulnerabilities that could give rise to security incidents and provides targeted recommendations to bolster the security posture of telecommunications operators' ICT supply chains.

Keywords： telecomoperators; ICT supplychain security; risk assessment

0 引言

电信运营商信息和通信技术（InformationandCommunicationsTechnology，ICT）供应链是由多个上下游组织相互连接形成的网链结构，电信运营商处于产业链的中下游核心位置，其上游主要为通信设备商、ICT硬件、软件供应商等，最上游的核心供应商主要为半导体芯片厂商[]。（剩余1660字）