Your situation
You are planning a 5G campus network or developing mobile network technology and need support with IT security? We help you classify security requirements early and assess the properties of your solution.
Free of charge and without obligation.
Your situation
Since 1 January 2026, critical components in Germany must be certified before they are first used in 5G telecommunications networks. As evidence, the BSI issues certificates according to NESAS CCS-GI – the national procedure based on the GSMA's Network Equipment Security Assurance Scheme (NESAS). Because mobile networks consist of many components with short release cycles, frequent evaluations are necessary. Manufacturers ask themselves how this can be done economically.
Private 5G campus networks also need security from the outset: whether enhanced mobile broadband (eMBB), massive machine type communication (mMTC) or ultra-reliable low latency communications (uRLLC) – availability, confidentiality and integrity have to be weighted differently for each use case. Security aspects already belong in the selection of technology partners, integrators and operating models.
secuvera is recognised by the BSI as a NESAS evaluation facility and operates its own 5G test laboratory with its own campus network. In the OPNESAS research project, a BSI NESAS certification for the 5G core of a private campus network was carried out for the first time together with our partners. Which evidence fits your product overall, we clarify in our consulting for product manufacturers.
Services & results
Your 5G network components are evaluated for certification according to NESAS CCS-GI, which has applied to critical components in Germany since 1 January 2026 – by a BSI-recognised evaluation facility with its own frequency assignment and its own 5G core. For your private 5G campus network, you know the security requirements for each use case early on, already when choosing technology partners and the operating model.
A mobile network component and a campus network are different evaluation objects. For network components, we act as an evaluation facility in the certification procedure according to NESAS CCS-GI; for campus networks, we assess the use case, architecture, integration and operation. Our 5G evaluations are designed for a high degree of automation.
We clarify whether it is a component for telecommunications networks or a campus network and which evidence is required. For products, other BSI certifications according to TR-03163 are also possible in addition to NESAS CCS-GI, such as Common Criteria or the BSZ.
A clearly defined path to evaluation and evidence
A defined evaluation object and clarified parties to the procedure for the required 5G security evidence.
As an evaluation facility recognised by the BSI, we assess the security of your 5G network components. Our test laboratory has its own frequency assignment from the Federal Network Agency (Bundesnetzagentur) and a 5G core, and transmits in the 3.7 GHz band.
The laboratory concept relies on shift left, remote testing and a high degree of automation – so that evaluations remain repeatable and economical with frequent releases. The certification decision is made by the BSI.
Evaluation results for your certification procedure
The security assessment of your components as the basis for certification according to NESAS CCS-GI by the BSI.
Together we look at the intended purpose – eMBB, mMTC or uRLLC –, planned communication relationships and your requirements for availability, confidentiality and integrity.
Requirements for your 5G deployment
Documented requirements for availability, confidentiality and integrity for the described 5G use case.
We assess the security properties of your 5G solution and include technology partners, integrator, network architecture and operating model. The OPNESAS project has shown that the NESAS certification framework can also be applied in practice to private 5G networks.
Assessment of security properties
Identified need for action and expert recommendations for planning or operation.
Our NESAS evaluator team has been recognised by the BSI as an evaluation facility since 2024 and is authorised to act as an evaluation facility in certification procedures according to NESAS CCS-GI for 5G network components. Together with Common Criteria and BSZ, we thus offer all BSI certifications according to TR-03163. secuvera is one of the few NESAS evaluation facilities recognised by the BSI in Germany.
Since 2023, we have been developing 5G security evaluations based on NESAS in the BSI-funded research project OPNESAS together with partners such as Ruhr University Bochum, Campus Genius and Montsecure. Our 5G test laboratory has been in operation since January 2024. In 2026, a BSI NESAS certification for the 5G core of a private campus network was carried out in the project for the first time; we were responsible for the security assessment of the core network components.
For private 5G networks, secuvera coordinated the development of the TeleTrusT guide “IT-Sicherheit in 5G-Campusnetzen” (2024, in German). The guide by the TeleTrusT working group “Smart Grids/Industrial Security” was produced with the support of the BSI and contains a questionnaire that helps operators take IT security into account when selecting technology, provider and operating model.
Project manager and head of our evaluation facility Sebastian Fritsch also teaches the topic, including guest lectures on 5G security at Goethe University Frankfurt.
Getting started
Describe the use case, the project status and the parties involved. For a campus network, architecture and operating documents help; for a product, the intended operational environment and customer requirements.
We clarify whether you need support with planning, an assessment of existing security properties or the preparation of evidence. The scope and the evaluation facilities involved are named in the proposal.
A campus network audit does not replace a product certification. A specific certification engagement and the recognised bodies involved must be defined separately.
Already when selecting technology partners, integrators and operating models. The intended purpose and communication relationships determine how availability, confidentiality and integrity are weighted. These requirements should be clarified before fundamental architecture decisions are made.
The assessment can look at existing security properties and the further need for action. For this, the architecture, integration and operating model are included to the agreed extent. The specific use case determines the focus.
No. The audit looks at a specific network environment. A product procedure evaluates the mobile network equipment defined for it. The evaluation object, evidence goal and bodies involved must be defined separately.
For campus networks, the use case, architecture and operational responsibility are important. For mobile network products, the focus is on security functions, the intended operational environment and customer requirements. The project status shows which decisions can still be influenced.
Yes. Our 5G test laboratory has been in operation since January 2024 – with its own frequency assignment from the Federal Network Agency (Bundesnetzagentur), a 5G core and radio operation in the 3.7 GHz band. This allows us to carry out tests for manufacturers on our own campus network.
Gemeinsam mit unseren Projektpartnern CampusGenius, Montsecure und der Ruhr-Universität Bochum haben wir im Forschungsprojekt OPNESAS („Optimierung der Sicherheit für 5G-Campus-Netzwerke durch Operationalisierung der …
Für viele ist die neue BSI-5G-Zertifizierung (NESAS CCS-GI) noch Zukunft, wir sind bereits seit Jahren aktiv. Als vom BSI anerkannte Prüfstelle haben wir durch langjährige Projekterfahrung eine hohe Effizienz und einen …
Ein neues Forschungsprojekt OPNESAS ist gestartet! Das OPNESAS Projektteam besteht aus der Ruhr-Universität Bochum, den beiden jungen Unternehmen Radix Security und Campus Genius sowie secuvera. In den nächsten zwei …
