The Government Communications Security Bureau (GCSB) regulates network security under the Telecommunications (Interception Capability and Security) Act (TICSA). The Act requires network operators to notify GCSB of certain proposed decisions, courses of action, or changes to their network.
As per Spark New Zealand’s statement today, I can confirm the GCSB under its TICSA responsibilities, has recently undertaken an assessment of a notification from Spark. I have informed Spark that a significant network security risk was identified.
As there is an ongoing regulatory process I will not be commenting further at this stage. The GCSB treats all notifications it receives as commercially sensitive.
