NIST issues security guidelines for Open RAN 5G networks

The National Institute of Standards and Technology (NIST) has released two reports regarding the security of Open RAN (Radio Access Network) architecture. These guidelines address the complexities of combining infrastructure and software from multiple vendors within a single telecommunications network.

The first report, NIST IR 8625, focuses on RAN Intelligent Controllers (RIC). While these controllers increase network flexibility through automation, they introduce new risks. NIST recommends implementing zero trust architectures, enhanced authentication mechanisms, and strict access controls.

The second report, NIST IR 8623, provides draft guidelines for U.S. federal agencies implementing Open RAN, aligning security requirements with the Cybersecurity Framework 2.0. Public consultation for these guidelines is scheduled to continue until November 2, 2026.

As companies like Vodafone, Orange, and Samsung expand Open RAN projects in Europe, these standards may influence hardware and software requirements, particularly in public procurement processes.