UK Telecommunications (Security) Act 2021 r6a: reg.6(1), (2) Monitor and analyse access to and operation of security critical functions, automated where possible, and investigate anomalies

What does r6a require?

Network providers must monitor and analyse access to security critical functions to identify anomalous activity. Network and service providers must monitor and analyse the operation of security critical functions to identify any compromise, using automated means where possible, and investigate any anomalous activity.