ISACA Guide Helps Enterprises Manage Privacy Risk and Threats of 5G Technology

Estimated reading time: 2 minutes

5G technology can transform the experience of its users – providing a faster network with greater capacity and less delay – but with its new capabilities come new privacy threats. ISACA’s white paper, 5G Privacy: Addressing Risk and Threats, reviews 5G technology from the privacy perspective, including user privacy-related elements, threats, and mechanisms and regulatory means to address threats and risk.

Several industries use applications powered by 5G services, but those with most potential for transformation by its adoption include retail, healthcare and manufacturing. The publication explores the capabilities of 5G technology, including:

• Supporting diverse types of static and mobile Internet of Things (IoT) devices
• Decreasing network energy usage
• Meeting technical and services requirements of specific customers/market segments via the 5G network slicing function
• Revolutionizing industries by offering endless possibilities with virtually no limits, such as drone deliveries, cloud-connected traffic control, and remote surgery.

Privacy on the 5G network can be divided into three main categories:

• Data privacy: With many smart and heterogeneous devices residing on and connected to each other on a 5G network, the network will have a huge volume of data, such as sensitive banking information, that must be protected.
• Location privacy: With the introduction of 5G, several service providers constantly track the location of users who access services via the network.
• Identity privacy: Identity-related information associated with a device, system or individual must be provided to and used by a 5G network to establish a connection.

The ISACA paper delves into 5G-related privacy threats related to those categories and shares mitigating controls for each one. The privacy threats highlighted include:

1. Identity privacy exposure (user identity catching)
2. Risk of unauthorized data access and data breaches
3. Issues in transboundary data flow (transborder privacy requirement differences)

“With the expanded surface and granularity of 5G technology, new privacy concerns arise, including a very high risk of leaking personal data or exposing hints that could reveal sensitive personal information,” says Safia Kazi, Principal, Privacy Professional Practices at ISACA. “To build and maintain the trust relationship between consumers and service providers, effective consideration of privacy issues is critical.”