techUK news and views Opportunities
28 Aug 2025

Consultation now open on updating the Telecoms Security Code of Practice 

DSIT has launched a formal consultation on updates to the Telecommunications Security Code of Practice. This follows extensive feedback from providers, Ofcom and the NCSC since the Telecommunications (Security) Act 2021 (TSA) came into force, alongside the impact of new technologies and a changing threat landscape. 

From its introduction, the Code was designed to be a “live” document – to be updated to reflect emerging risks and technological change. But this review is the first major update since the Code and accompanying Electronic Communications (Security Measures) Regulations 2022 came into effect, and is therefore a major opportunity for members to feedback to DSIT on the TSA.  

Drivers for change 

The government cites three main reasons for revisiting the Code now: 

  • Volume of feedback: providers and regulators have identified areas where the Code lacks clarity or alignment with industry practice. 
  • Evolving technologies: the increasing adoption of eSIMs, widespread use of APIs, and growing automation in networks all present new risks that the current Code does not fully address. 
  • Threat landscape: heightened hostile-state cyber activity against telecoms globally, and the need to ensure the Code reflects the latest NCSC guidance and the updated Cyber Assessment Framework (CAF v4.0). 

Key proposals 

The consultation puts forward a range of amendments and additions, grouped under three themes: 

1. Greater clarity 

  • Updated definitions and glossary terms. 
  • Clearer guidance on security critical functions, third-party administrators, and service accounts. 

2. Holistic, risk-based approach 

  • Stronger emphasis that the Code should be implemented end-to-end, not treated as isolated technical measures. 
  • New references to early implementation of measures where feasible, rather than waiting for regulatory deadlines. 

3. New or strengthened measures 

  • A structured approach to Privileged Access Workstations (PAWs), aligned with NCSC and ETSI guidance. 
  • Guidance on eSIM provisioning and SIM-swap protection. 
  • New controls for network APIs to reduce exposure and harden authentication. 
  • Expectations for securing automation pipelines, including validation of inputs and outputs. 
  • Expanded measures on testing, with a move towards continuous, automated, and risk-based approaches. 
  • Updates to Annex C to align with the NCSC’s CAF v4.0. 

Consultation process 

The government is seeking input specifically on the proposed updates, not on the wider Code. Responses will help shape the next iteration of the framework and ensure guidance remains practical, proportionate and effective in light of current threats. 

The consultation closes on 22 October 2025. Submissions must be made via the government’s online portal. 

techUK – Have your say 

Join techUK’s Telecoms Security and Diversification Working Group to have your say on our response to this consultation on proposed changes to the TSA Code of Practice. This working group will be our main forum through which our engagement with DSIT and submission will be shaped. Feel free to reach out to the team below if you have any urgent questions. 

 

 

Communications Infrastructure Programme activities

techUK brings together government, the regulator, telecom companies and stakeholders to help the UK maximise the benefits of adopting advanced communications services. We ensure our members have a clear understanding of market developments, customer requirements, and government priorities. Visit the programme page here.

Upcoming events

8 September 2025

Cyber confidence for London Businesses

London Partner event
15 September 2025

Advances in Satellite to Ground Connectivity Workshop

West Hub, JJ Thomson Ave, Cambridge CB3 0US Workshop
17 September 2025

Satellite Telecommunications Committee Meeting Q3 2025

London and Online Meeting

Latest news and insights 

Learn more and get involved

 

Communications Infrastructure and Services updates

Sign-up to get the latest updates and opportunities from our Communications Infrastructure and Services programme.

 

 

Here are the five reasons you should join the Communications Infrastructure and Services programme

Download

Join techUK groups

techUK members can get involved in our work by joining our groups, and stay up to date with the latest meetings and opportunities in the programme.

Learn more

 

 

Become a techUK member

Our members develop strong networks, build meaningful partnerships and grow their businesses as we all work together to create a thriving environment where industry, government and stakeholders come together to realise the positive outcomes tech can deliver.

Learn more

 Meet the team

Sophie Greaves

Sophie Greaves

Associate Director, Digital Infrastructure, techUK

Sophie Greaves is Associate Director for Digital Infrastructure at techUK, overseeing the Communications Infrastructure and Services  Programme at techUK, and the UK Spectrum Policy Forum.

Sophie was promoted to Head having been Programme Manager for Communications Infrastructure and Services, leading techUK's telecoms activities, engagement and policy development. Previously, Sophie was Programme Assistant across a variety of areas including the Broadband Stakeholder Group, Central Government, Financial Services and Communications Infrastructure programmes.

Prior to joining techUK, Sophie completed a masters in Film Studies at University College London; her dissertation examined US telecoms policy relating to net neutrality and content distribution.

Email:
[email protected]
Phone:
020 7331 2038
Twitter:
@SJMJames1,@SJMJames1
LinkedIn:
https://www.linkedin.com/in/sophiegreaves/,https://www.linkedin.com/in/sophiegreaves/

Read lessmore

Tales Gaspar

Tales Gaspar

Programme Manager, UK SPF and Satellite, techUK

Tales has a background in law and economics, with previous experience in the regulation of new technologies and infrastructure.

In the UK and Europe, he offered consultancy on intellectual property rights of cellular and IoT technologies and on the regulatory procedures at the ITU as a Global Fellow at the European Space Policy Institute (ESPI).

Tales has an LL.M in Law and Business by the Getulio Vargas Foundation (FGV) and an MSc in Regulation at the London School of Economics, with a specialization in Government and Law.

Email:
[email protected]
Phone:
+44 (0) 0207 331 2000
Website:
www.techUK.org
LinkedIn:
www.linkedin.com/in/talesngaspar

Read lessmore

Josh Turpin

Josh Turpin

Programme Manager, Telecoms and Net Zero, techUK

Josh joined techUK as a Programme Manager for Telecoms and Net Zero in August 2024.

In this role, working jointly across the techUK Telecoms and Climate Programmes, Josh is responsible for leading on telecoms infrastructure deployment and uptake and supporting innovation opportunities, as well as looking at how the tech sector can be further utilised in the UK’s decarbonisation efforts.  

Prior to joining techUK, Josh’s background was in public affairs and communications, working for organisations across a diverse portfolio of sectors including defence, telecoms and infrastructure; aiding clients through stakeholder engagement, crisis communications, media outreach as well as secretariat duties.

Outside of work, Josh has a keen interest in music, painting and sailing.

Email:
[email protected]
Phone:
020 7331 2038
LinkedIn:
https://www.linkedin.com/in/josh-turpin/

Read lessmore

 

 

 

Return to listing