Many things keep telecommunications leaders up at night, not least of which is how to evolve from being just a dumb pipe, and doing so securely and sustainably. A myriad of moving parts to monitor have to be considered to ensure compliance with regulations as well as fulfilment of end users’ needs for 24/7 secured access to connectivity and online services.

According to SecurityGen’s CTO Dmitry Kurbatov, “A healthy organization is never static, it continuously evolves to deliver greater value to customers. Communication Service Providers (CSPs) are rapidly transforming into Digital Service Providers or TechCos, introducing new services for individuals and enterprises.”

A fundamental requirement for this development and evolution however, is a strong foundation of risk management and cybersecurity.

But as the world becomes more digital, the very infrastructures that connect, process and deliver information to millions if not billions, have become prime targets for malicious actions. These actions range from subjecting telco networks to service disruption and ransom, or compromising their integrity so they are susceptible to cyber risks.

Dmitry Kurbatov

Telecom networks have always been prime targets because of their position in the supply chain of services. With rising adoption of generative AI, connected home devices, and new technologies there is more complexity to navigate in an already risk-riddled landscape.

Generative AI

Within six months of the launch of OpenAI’s ChatGPT, Axiata Group provided clear guidance and set expectations for its use across all operating companies and employees.

Abid Adam

Responsibility for the governance and risk management of emerging technologies, including artificial intelligence, is a collaborative effort between the Group Risk & Compliance and the AI & Data Governance department which plays a key role in shaping the Axiata’s response to such innovations, Chief Risk, Compliance & Ethics Officer, Abid Adam, explained.

The Group recognizes the importance of acting proactively, particularly with transformative technologies like generative AI, to ensure appropriate oversight and risk mitigation.

As part of its initial response, Axiata developed six guiding principles for the ethical and responsible use of generative AI. These principles are supported by policies and processes designed to promote transparency, fairness, and accountability, particularly in high-risk applications.

Beyond AI, the Group’s commitment to digital trust extends to broader areas of technology risk. Over the past seven years, significant efforts have been undertaken to establish world-class cybersecurity capabilities as part of an enterprise-wide transformation program.

These principles are supported by policies and processes designed to promote transparency, fairness, and accountability, particularly in high-risk applications.

Given Axiata’s wide geographic footprint across Asian markets with varying levels of technological maturity, it was essential to ensure that critical systems and assets were consistently protected. To address this, a Minimum Baseline Security Standard (MBSS) was introduced. This framework not only establishes consistent cybersecurity expectations across all markets but also ensures automated compliance monitoring and robust governance mechanisms.

The journey toward this transformation was met with initial skepticism, including from external vendors. However, the structured and forward-looking approach has since positioned the Group as a regional leader in cybersecurity and responsible AI governance.

Security requirements must not falter

New technologies on the horizon may be fast approaching, but their implementations have to take into account their security.

In Malaysia, when Ericsson launched Advanced 5G with Digital Nasional Berhad (DNB), its country manager David Hagërbro highlighted secure connectivity as an important requirement for enterprises to adopt 5G technology and enable their digitalization initiatives.

David Hägerbro

Abid who has observed convergence of IT and telco technologies also stated there is an ensuing transition of telco networks and systems towards becoming more software-defined and autonomous, with a lot of capabilities delivered via cloud and APIs. Unlike traditional ones which are hardened, dedicated and air-gapped from the Internet, modern telco systems have attack surfaces and points of vulnerability that need to be secured.

In the foreword of a 2024 report about the landscape in APAC, the GSMA had noted, telecom operators face pressing cyberthreats, and to address this, they are enhancing their cybersecurity readiness through initiatives such as “establishing Security Operation Centres (SOCs) for real-time threat detection and response, implementing security standards like the Network Equipment Security Assurance Scheme (NESAS), and investing in advanced threat intelligence and analytics capabilities.”

This is reflected during a 2025 Asian-level telecom award event which saw major telcos in the region like Singtel, Axiata Group, and CMC Telecom being recognized for for enterprise security advancements like a Quantum Safe Network (QSN), automated vulnerability detection, and a multi-layered security model that integrates AI and cloud to protect against ransomware, data breaches, and distributed denial-of-service. Japan’s NTT also partners strategically to enhance its cybersecurity capabilities.

Due to the significant role that telecoms have in the day-to-day of lives and businesses, protection of this critical national infrastructure cannot be overstated. Dmitry also opined, “Cybersecurity is not just a compliance requirement, it is a key differentiator directly linked to service quality and customer trust.”

Best practices and threat intelligence sharing to shape governance principles, ethical AI usage, and cybersecurity regulations cannot be overlooked as well.

In their blog, Telefonica observed that for 2025, “Companies will need to integrate standards, adapt to multiple certifications and protect supply chain security as incidents increasingly transcend company boundaries. Cybersecurity liability already extends to the board level and could have a high financial impact.”

Human-centric security

This article wants to reiterate telco networks as critical national infrastructure are often prime targets by cyberattackers for a reason. Its impact upon individuals, businesses, economies, and governments is pervasive, touching key areas such as education, health, employment, and more.

Telefonica has noted that impact on these key areas increasingly affects well-being also. Development of the telecommunications industry as well as the policies that guide digital inclusion should encompass key issues for well-being like data protection, disinformation, cybercrime, fight against fraud, the development of digital identity, ethical use of emerging tech, and protection of minors.

Cybersecurity is not a barrier but an enabler of digital inclusion as well as digital transformation – with it telcos can offer continuous availability and service quality, as well as deliver on connectivity’s greatest promise — evolving technological advancement into tangible benefits for society, businesses, and governments.