UK Telecommunications (Security) Act 2021 r3b: reg.3(3)(d), (e), 3(5) Protect and appropriately locate security critical functions, secure equipment through its lifecycle, and contain compromises

Network providers must design and build the network so that security critical functions are appropriately protected and their equipment appropriately located, and take appropriate measures in procurement, configuration, management and testing of equipment to secure it and the functions it runs. Network and service providers must design so that a compromise in one part does not affect other parts.