The National Cyber Security Centre is asking private 5G suppliers and researchers to help shape networks designed to keep working when ordinary communications infrastructure is unavailable, degraded, or under attack, moving the technology beyond the familiar promise of faster wireless connectivity towards operational resilience.

The NCSC has opened an expression-of-interest process covering rapidly deployable private 5G systems, wireless alternatives to fixed backhaul, identity-based access, recovery, threat detection, and integration with security operations. Organisations have until 5pm on 31 August to respond, although the agency is explicit that the exercise is market engagement rather than a commitment to procure technology or award contracts.

Private 5G gives an organisation its own mobile network rather than relying entirely on a public operator, allowing tighter control over coverage, devices, capacity, and some security functions. Industrial sites, campuses, logistics operations, emergency environments, and infrastructure operators can consequently build wireless services around their own requirements, but the NCSC’s work begins from the assumption that connectivity alone is insufficient.

The agency wants to understand how future networks can be installed with limited specialist resources, continue operating when conventional backhaul is disrupted, recover from cyber incidents, and connect mobile access with the identity and monitoring systems already used across enterprise estates.

Resilience changes the network design

The NCSC is particularly interested in compact and portable systems that can be brought into service quickly, including in temporary, remote, emergency, and disconnected environments. That pushes private 5G beyond permanently installed campus networks towards deployments where communications may have to be restored or created under difficult conditions.

One priority is reducing dependence on fixed backhaul, the links connecting local radio infrastructure with the wider network. The agency highlights wireless mesh networking and Integrated Access and Backhaul as possible approaches, allowing parts of the 5G network to carry both user traffic and the connections required to extend the network itself.

Such architectures can make deployment more flexible, although they also introduce operational trade-offs. A network able to form around damaged or unavailable fixed infrastructure must manage capacity across those wireless links, while additional components and routes increase the systems that have to be monitored and secured.

Recovery therefore appears alongside availability in the NCSC’s requirements. The agency is seeking approaches for securely backing up and restoring private 5G services and subscriber information so that a technical failure or cyber incident does not become a prolonged communications outage.

The direction fits a wider shift in UK resilience policy, where digital systems are being treated more explicitly as dependencies behind essential services. Digital failure has already moved further into Britain’s formal national risk planning, while private networks are becoming more attractive in settings where public connectivity cannot provide enough control or redundancy.

Identity moves into the mobile network

The NCSC is interested in certificate-based authentication, public-key infrastructure, zero-trust approaches, certificate lifecycle management, and stronger identity assurance for devices and users connecting through private 5G.

That creates a different model from treating a mobile subscription or SIM as sufficient evidence that a device should be trusted. If private 5G becomes part of an enterprise identity architecture, access can potentially be tied more closely to device state, organisational credentials, certificates, and policy.

Monitoring presents a similar challenge because mobile networks introduce components that conventional security teams may historically have had little reason to inspect. Radio infrastructure, signalling, transport networks, and the 5G core can all generate security events, while organisations still need to correlate them with information from endpoints, cloud systems, applications, and identity platforms.

The NCSC is consequently seeking 5G-specific intrusion detection, monitoring across network interfaces, detection of rogue components, protocol anomaly detection, security analytics, and connections into SIEM and security-operations environments.

Market engagement comes before procurement

The exercise gives suppliers an early indication of the capabilities the UK’s national cyber authority considers important, but it does not amount to an order book. The NCSC says responses may help identify organisations for subsequent collaboration or procurement, with any future opportunity requiring separate approval and governance.

Intellectual-property conditions will also deserve attention from prospective participants because the NCSC expects to retain ownership of foreground intellectual property created as part of a future project, while suppliers would generally retain their pre-existing products, software, tools, and methodologies.

Private 5G remains a broad category encompassing very different architectures. A portable network deployed after an infrastructure failure has different constraints from a permanently installed industrial system supporting automated machinery, even if both use the same mobile standard.

The NCSC’s requirements are nevertheless revealing because they define success in operational terms. A future network is expected not merely to provide bandwidth but to deploy quickly, authenticate devices properly, expose meaningful security telemetry, survive disruption, and recover without an extended outage.