Technology · News

NIST releases two reports on open radio security

The notice says the reports examine security issues in RAN Intelligent Controllers and map that security to the Cybersecurity Framework.

Theo Arden · Published · Updated Primary source: NIST · Explore evidence and context

On October 8, 2026, NIST published two interagency reports on the security of open radio access networks in advanced 5G mobile networks. The notice says the reports examine security issues in RAN Intelligent Controllers and map that security to the Cybersecurity Framework.

NIST IR 8625 is final. It covers the security requirements of RAN Intelligent Controllers, which the notice describes as the components that enable automated monitoring and control of 5G open radio access networks. The controller is used to configure, monitor, and control network resources for specific cases through applications called rApps and xApps. Those applications communicate with the network through standardized interfaces. The notice says the interfaces include security features for authentication, authorization, and confidentiality. IR 8625 discusses the current state of those features and future work toward a strict zero trust architecture for the controller and the applications.

NIST IR 8623 is the first public draft of a Cybersecurity Framework 2.0 profile for federal agencies adopting an open radio access network. The notice says a federal agency that deploys one as part of its IT infrastructure must include that deployment in its risk management program. The draft describes how components that follow O-RAN Alliance security specifications support framework outcomes, and it points to Alliance documents and other guidance for agency cybersecurity managers. Comments are open through November 2, 2026. The notice says the publication details include the draft and the instructions for sending comments.