,h4 ,,res4 #ege ,in the ,house of ,representatives1 ,u4 ,s41 ,january #h1 #bjbj ,,resolution ,whereas #e;,g1 the next generation 7#eth generation7 in wireless technology1 promises the next evolution of communications and information technology services1 applications1 and capabilities across every sector of business1 government1 entertainment1 and communications2 ,whereas the ,united ,states1 ,europe1 ,china1 and others are racing toward #e;,g adoption and upgrading existing networks1 which will drive subsequent advances in artificial intelligence1 machine learning1 smart homes1 smart cities1 robotics1 autonomous vehicles1 and quantum computers2 ,whereas #e;,g will make possible the automatization of everyday activities and the use of the full potential of the ,internet of ,things2 ,whereas these developments1 while evolutionary1 could include risks to important public interests1 including privacy1 data security1 public safety1 and national security2 ,whereas in a highly connected world1 disruption of the integrity1 confidentiality1 or availability of communications or even the disruption of the communications service itself can seriously hamper everyday life1 societal functions1 the economy1 and national security2 ,whereas the security of #e;,g networks is crucial for national security1 economic security1 and other ,united ,states national interests and global stability2 ,whereas operators of communications infrastructure depend on a complex supply chain of technology from a global market of suppliers and service providers2 ,whereas government security officials and experts from #cb countries came together in ,prague in ,may of #bjai to work out guidelines for the deployment and security of #e;,g networks2 ,whereas representatives agreed that major security risks emanate from the cross-border complexities of an increasingly global supply chain which provides information and communications technology equipment4 ,these risks should be considered as part of the risk assessment based on relevant information and should seek to prevent proliferation of compromised devices and the use of malicious code and functions42 and ,whereas the ,prague #e;,g ,security ,conference adopted security recommendations1 which have come to be known as ,the ,prague ,proposals3 ,now1 therefore1 be it #a4 ,sense of the ,house of ,representatives ,the ,house of ,representatives-- 7#a7 urges all stakeholders in the deployment of #e;,g communications infrastructure to carefully consider adherence to the recommendations of ,the ,prague ,proposals 7as described in section #b7 as they procure products and services across their supply chain2 and 7#b7 encourages the ,president and ,federal agencies to promote global trade and security policies that are consistent with ,the ,prague ,proposals and urge our allies to embrace the recommendations of ,the ,prague ,proposals for their #e;,g infrastructure4 #b4 ,prague ,proposals ,the text of ,the ,prague ,proposals is as follows3 7#a7 ,policy 7,a7 ,communication networks and services should be designed with resilience and security in mind4 ,they should be built and maintained using international1 open1 consensus-based standards and risk-informed cybersecurity best practices4 ,clear globally interoperable cyber security guidance that would support cyber security products and services in increasing resilience of all stakeholders should be promoted4 7,b7 ,every country is free1 in accordance with international law1 to set its own national security and law enforcement requirements1 which should respect privacy and adhere to laws protecting information from improper collection and misuse4 7,c7 ,laws and policies governing networks and connectivity services should be guided by the principles of transparency and equitability1 taking into account the global economy and interoperable rules1 with sufficient oversight and respect for the rule of law4 7,d7 ,the overall risk of influence on a supplier by a third country should be taken into account1 notably in relation to its model of governance1 the absence of cooperation agreements on security1 or similar arrangements1 such as adequacy decisions1 as regards data protection1 or whether this country is a party to multilateral1 international or bilateral agreements on cybersecurity1 the fight against cybercrime1 or data protection4 7#b7 ,technology 7,a7 ,stakeholders should regularly conduct vulnerability assessments and risk mitigation within all components and network systems1 prior to product release and during system operation1 and promote a culture of find_/fix_/patch to mitigate identified vulnerabilities and rapidly deploy fixes or patches4 7,b7 ,risk assessments of supplier's products should take into account all relevant factors1 including applicable legal environment and other aspects of supplier's ecosystem1 as these factors may be relevant to stakeholders' efforts to maintain the highest possible level of cyber security4 7,c7 ,when building up resilience and security1 it should be taken into consideration that malicious cyber activities do not always require the exploitation of a technical vulnerability1 e4g4 in the event of insider attack4 7,d7 ,in order to increase the benefits of global communication1 ,states should adopt policies to enable efficient and secure network data flows4 7,e7 ,stakeholders should take into consideration technological changes accompanying #e;,g networks roll out1 e4g4 use of edge computing and software defined network_/network function virtualization1 and its impact on overall security of communication channels4 7,f7 ,customer--whether the government1 operator1 or manufacturer--must be able to be informed about the origin and pedigree of components and software that affect the security level of the product or service1 according to state of art and relevant commercial and technical practices1 including transparency of maintenance1 updates1 and remediation of the products and services4 7#c7 ,economy 7,a7 ,a diverse and vibrant communications equipment market and supply chain are essential for security and economic resilience4 7,b7 ,robust investment in research and development benefits the global economy and technological advancement and is a way to potentially increase diversity of technological solutions with positive effects on security of communication networks4 7,c7 ,communication networks and network services should be financed openly and transparently using standard best practices in procurement1 investment1 and contracting4 7,d7 ,state-sponsored incentives1 subsidies1 or financing of #e;,g communication networks and service providers should respect principles of fairness1 be commercially reasonable1 conducted openly and transparently1 based on open market competitive principles1 while taking into account trade obligations4 7,e7 ,effective oversight on key financial and investment instruments influencing telecommunication network development is critical4 7,f7 ,communication networks and network service providers should have transparent ownership1 partnerships1 and corporate governance structures4 7#d7 ,security1 ,privacy1 and ,resilience 7,a7 ,all stakeholders including industry should work together to promote security and resilience of national critical infrastructure networks1 systems1 and connected devices4 7,b7 ,sharing experience and best practices1 including assistance1 as appropriate1 with mitigation1 investigation1 response1 and recovery from network attacks1 compromises1 or disruptions should be promoted4 7,c7 ,security and risk assessments of vendors and network technologies should take into account rule of law1 security environment1 vendor malfeasance1 and compliance with open1 interoperable1 secure standards1 and industry best practices to promote a vibrant and robust cyber security supply of products and services to deal with the rising challenges4 7,d7 ,risk management framework in a manner that respects data protection principles to ensure privacy of citizens using network equipment and services should be implemented4 4 ,clerk4