Official websites use .gov
A .gov website belongs to an official government organization in the United States.
Secure .gov websites use HTTPS
A lock (
) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.
NIST Publishes Reports on Open Radio Access Network (O-RAN) Security
Examining security issues in RAN Intelligent Controllers and mapping O-RAN security to the CSF.
- Two new NIST Interagency Reports (NIST IR) focus on the security of Open Radio Access Networks (O-RAN) in advanced 5G mobile networks.
- NIST IR 8625 (final) focuses on the security requirements of RAN Intelligent Controllers (RICs), the key components that enable intelligent automated monitoring and control of 5G open RANs.
- NIST IR 8623 (draft) is the first public draft of a Cybersecurity Framework (CSF) 2.0 profile for federal agencies adopting O-RAN
NIST IR 8625 Open Radio Access Network (O-RAN) Near-Real Time RAN Intelligent Controller (RIC) Security
The RAN Intelligent Controller (RIC) allows the RAN resources to configured, monitored and controlled to address specific use cases using specialized applications called rApps and xApps. These applications communicate with the RAN through standardized interfaces that include security features to enable authentication, authorization and confidentiality. This report discusses the current state of security features in the RIC as well as discussing future directions for security that would further enable a strict zero trust architecture for the RIC and applications.
NIST IR 8623 Cybersecurity Framework 2.0 Community Profile for Federal Agency Open Radio Access Network (O-RAN) Deployment
Federal agencies that deploy an Open Radio Access Network (O-RAN) as part of their IT infrastructure must include that deployment in their risk management programs. This draft Cybersecurity Framework (CSF) 2.0 profile describes how components that conform to the security specifications produced by the O-RAN ALLIANCE support various CSF 2.0 outcomes. It also includes references to O-RAN ALLIANCE-produced documents and other relevant guidance that may help federal agency cybersecurity managers. The public comment review period is open through November 2, 2026. See the publication details for a copy of the draft and instructions for submitting comments.
Find additional information on the NIST Advanced Security Architectures for Next Generation Wireless project webpage.