RUSI: EU needs unified risk framework for Chinese tech vendors

UK think tank RUSI urged the EU to develop a bloc-wide risk assessment framework for Chinese technology suppliers. Only 10 of 27 member states have fully adopted the voluntary EU 5G Toolbox, while proposed Cyber Security Act amendments would let Brussels ban untrusted vendors across 18 critical sectors with a 36-month rip-and-replace deadline.

• Only 10 of 27 EU states fully implemented the voluntary 5G Toolbox
• CSA amendments would ban vendors in 18 sectors with 36-month replacement
• Chinese suppliers held 59% of Germany's and 32% of Spain's 5G RAN in 2024
• The EU still has no official definition of a high-risk vendor