ETSI White Paper – Security

FOREWORD
The increasingly rapid evolution and growth in the complexity of new systems and
networks, coupled with the sophistication of changing threats and the presence of
intrinsic vulnerabilities, present demanding challenges for maintaining the security of
Information and Communications Technology (ICT) systems and networks. To minimise
exposure to risks, security must be built in from the beginning when designing new
architectures, not added on later as an optional feature.
As a response to such challenges, Information Security standards are essential to
ensure interoperability among systems and networks, compliance with legislation and
adequate levels of security. These standards provide the means for protecting the user,
creating a more secure and profitable environment for the industrial sector, from SMEs
to large global companies, and providing benefits for a diverse range of interest groups
that include government organisations, research bodies and universities.
ETSI is an independent, non-profit organisation, with over 20 years of experience of
successfully pursuing its mission to produce globally-applicable ICT standards. It has
always maintained a strong focus on security matters.
ETSI is committed to the establishment and continuous improvement of effective and
interoperable telecommunications systems for the benefit of the global community.
Addressing security issues in Next Generation Networks, protecting citizens in
emergency scenarios, and combatting global climate change by lowering power
consumption are examples which highlight some of ETSI's commitments. ETSI
continues to intensify its focus on matters related to security innovation by participating
actively in EU security research and innovation initiatives which aim to provide Europe,
and the rest of the world, with the tools necessary to create a secure environment for the
global citizen.
Standardisation activities carried out within various ETSI Technical Committees,
Working Groups, Industry Specification Groups and Partnership Projects cover a broad
spectrum of security issues, of which this White Paper provides an overview.
Carmine Rizzo, ETSI Security Standardisation Projects, ETSI Secretariat
Charles Brookson, Chairman, ETSI OCG Security
Acknowledgements
I would like to thank the following persons whose contributions have been essential to
this work:
Charles Brookson, for the benefit of his incredibly deep knowledge and
experience in the vast security arena and related ETSI work: thanks for verifying
the completeness and accuracy of this document;
Paul Reid for his help with the editorial content;
For their precious and indispensable inputs and contributions, colleagues at the
ETSI Secretariat: Andrea Lorelli, Anthony Wiles, Antoinette van Tricht, Bernt
Mattsson, Chantal Bonardi, Dionisio Zumerle (special thanks as co-author of the
first edition of this paper), Igor Minaev, John Meredith, Laurent Velez, Laurent
Vreck, Marlène Forina, Martin Arndt, Nathalie Guinet, Nathalie Kounakoff,
Nathalie Martin, Sebastian Müller, Silvana Castro Viguera, Sonia Compans and
Xavier Piednoir.
3
Carmine Rizzo