Security News > 2021 > August > Huawei to America: You're not taking cyber-security seriously until you let China vouch for us

Huawei has decided to school America on cyber-security, and its lesson is to co-operate with China so its vendors - including Huawei - can be trusted around the world.
Purdy, a former White House adviser on cyber security, makes some decent points - especially when pointing out that the Executive Order is only binding on federal agencies and their private sector suppliers.
The CSO therefore called for the USA's Securities and Exchange Commission to force businesses to adopt sound security frameworks like that offered by the National Institute of Standards and Technology.
The USA and China already have a mutual non-hacking pact but each nation regularly names the other as a source of hostile electronic attack.
While Purdy mentioned the UN's Group of Governmental Experts on Advancing Responsible State Behaviour in the Context of International Security as an effort that could stop nation-state cyber-skirmishes if only big nations signed up, major powers aren't exactly enthusiastic participants in its development.
To The Register's mind, that's Huawei arguing that if the USA and China had better infosec agreements, China would vouch for Huawei and the USA could therefore shop with confidence.
News URL
https://go.theregister.com/feed/www.theregister.com/2021/08/02/huawei_security_advice_to_usa/
Related news
- China now America's number one cyber threat – US must get up to speed (source)
- US defense contractor cops to sloppy security, settles after infosec lead blows whistle (source)
- China’s FamousSparrow flies back into action, breaches US org after years off the radar (source)
- 3 Ways the UK Government Plans to Tighten Cyber Security Rules with New Bill (source)
- Ex-Meta exec tells Senate Zuck dangled US citizen data in bid to enter China (source)
- China reportedly admitted directing cyberattacks on US infrastructure (source)
- China names alleged US snoops over Asian Winter Games attacks (source)
- Signalgate lessons learned: If creating a culture of security is the goal, America is screwed (source)
- Maryland man pleads guilty to outsourcing US govt work to North Korean dev in China (source)
- As US vuln-tracking falters, EU enters with its own security bug database (source)