UK Telecommunications (Security) Act 2021 M3: M3.01 to M3.19, M7.01 to M7.04 Signalling and routing security: understand and filter signalling, do not trust source addresses, secure BGP and prevent spoofing

Understand how signalling enters and leaves the network, which equipment malicious signalling could affect and who you connect with; block unneeded messages at the edge and never trust signals on the basis of their source (including UK global titles); send only signalling that recipients permit; monitor external BGP updates, report misuse, keep registry contact data accurate, filter routes in and out, reject external paths for your own prefixes and prevent IP spoofing (M3). Block message categories that should not cross the edge, minimise exposure of customer identifiers in signalling, and enable and perform BGP route origin validation (M7). Due: M3: Tier 1 by 31 March 2024; Tier 2 by 31 March 2025; M7: Tier 1 and Tier 2 by 31 March 2025.