Chairwoman Rosenworcel Announces Agency Action to Require Telecommunications Carriers to Secure Their Networks

Federal Communications Commission Chairwoman Jessica Rosenworcel proposed urgent action to safeguard the nation’s communications systems from real and present cybersecurity threats, including from state-sponsored cyber actors from the People’s Republic of China. The Federal Communications Commission will act to ensure telecommunication companies are required to secure their networks. Chairwoman Rosenworcel has shared with her fellow commissioners a draft Declaratory Ruling finding that section 105 of Communications Assistance for Law Enforcement Act (“CALEA”) affirmatively requires telecommunications carriers to secure their networks from unlawful access or interception of communications. That action is accompanied by a proposal that would require communications service providers to submit an annual certification to the FCC attesting that they have created, updated, and implemented a cybersecurity risk management plan, which would strengthen communications from future cyberattacks. If adopted, the Declaratory Ruling would take effect immediately. In addition, the draft Notice of Proposed Rulemaking would seek comment on cybersecurity risk management requirements for a wide range of communications providers. The proposal would also seek comment on additional ways to strengthen the cybersecurity posture of communications systems and services.