Cullen International’s new benchmark on 5G national security in the Americas region shows that Brazil, Chile and the United States are the only researched countries that have adopted network security measures that apply to 5G networks.
Brazil and Chile generally require telecoms network operators to implement cybersecurity policies and report serious incidents involving network security. Brazil requires operators to send detailed information to Anatel on critical network infrastructure, while Chile mandates operators designate a cybersecurity officer.
The US is the only researched country in the region to have restrictions in place against high-risk vendors in 5G networks. Operators must remove and replace equipment from companies in a list maintained by the federal telecoms regulator (FCC).

In Canada, a government bill under Senate review would require designated operators to implement cybersecurity programs, manage supply chain risks, and report incidents. The Canadian government announced plans to prohibit the use of products and services from vendors such as Huawei and ZTE.
To access the full benchmark, please click on “Access the full content” - or on “Request Access”, in case you are not subscribed to our Americas Digital Economy service.
>> See also our benchmark on 5G security measures across Europe!
more news
16 March 26
Africa tightens oversight of IoT connectivity as roaming and SIM rules diverge
Cullen International’s latest benchmarks assess the regulatory frameworks affecting IoT and M2M services in Africa. The research examines three core areas: whether permanent roaming is permitted, requirements for authorisation and notification, and whether and how SIM cards should be registered.
12 March 26
National implementation of the EU Gigabit Infrastructure Act
The Gigabit Infrastructure Act (GIA) is a regulation and as such directly applicable in all member states without the need for transposition into national law. Despite being a regulation, the GIA often sets minimum requirements, on top of which member states can adopt additional measures to address country-specific circumstances. Our new benchmark shows the choices made by member states when implementing the GIA.
09 March 26
How are EU member states transposing NIS2?
Our latest benchmark tracks the progress of the Directive on measures for a high common level of cybersecurity across the EU (NIS2) transposition in the 27 EU member states.