Understanding the TSA Code of Practice and How BeyondTrust Can Help

Even those outside of the telecommunications world will have heard of the government’s instruction to remove providers such as Huawei from UK communications networks. What you may not know is that this forms part of a much broader effort to secure our digital communications.

In response to increasing reliance upon and greater threats to telecommunications networks across the UK , the government has amended the 2003 Communications Act with the Telecommunications (Security) Act 2021 (‘the TSA’1). Within this act there are not only high-level security goals as to how telecommunications companies should be hardening themselves (defined in the Electronic Communications (Security Measures) Regulations 20222, but also specific technical guidance through the Telecommunications Security Code of Practice3 on how this can be achieved. The Code of Practice covers the concepts and principles that should be borne in mind when implementing changes to comply with the TSA, finally breaking them down into a numbered list of measures tied to specific deadlines.

Throughout this article, we will discuss key points described in the TSA, the Code of Practice, and how BeyondTrust solutions can be leveraged to meet these technical requirements, highlighting specific measures where relevant.