A mid-tier GCC mobile operator typically runs 80 to 120 distinct platforms: billing, CRM, provisioning, mediation, network management, fraud management, and the growing 5G core stack. Each was procured separately, integrated with custom middleware, and maintained by a different team or vendor. The network itself is resilient. The gaps between these systems are where revenue leaks, security exposures, and regulatory findings concentrate.
5G compounds the problem. Standalone 5G core disaggregates what was once monolithic infrastructure into cloud-native network functions — AMF, SMF, UPF, NSSF — each with its own API surface. Network slicing creates isolated logical networks for enterprise customers, but each slice inherits the security posture of the shared infrastructure underneath. A misconfigured service mesh or an unpatched container host does not affect one customer. It affects every slice running on that node.
Add to this the regulatory picture. CITC's Cybersecurity Regulatory Framework requires documented risk assessments, incident response capabilities, and periodic compliance reporting from all licensed operators. The NCA's Essential Cybersecurity Controls layer on further obligations for critical national infrastructure. Meeting both frameworks simultaneously — with evidence, not assertions — requires security operations that are structured rather than reactive.
