As we delve into the complexities of the telecommunications network, it’s important to unveil a concerning revelation that has surfaced recently. Inside sources have disclosed that a significant number of engineers working on the network of the BT have been neglecting to detail their work location and time. This leaves client companies unaware of the parties accessing their critical network infrastructure, potentially exposing them to cyber threats and network sabotage risks.
The potential implications of this became quite clear when a hospital and a financial institution in London went offline following a severing of a cable last October. Through industry regulation known as “whereabouts rules”, engineers are supposed to report their location and work timings when accessing BT’s infrastructure. However, records seen by the Telegraph reveal that compliance rates have stunningly plummeted to a mere 23%.
Drawing particular attention is CityFibre, the UK’s most extensive altnet and a significant competitor to BT’s market monopoly. Reportedly, as of October’s end last year, more than half of their logged jobs lacked whereabouts data.
As Openreach stated, “The recording of your contractor whereabouts when working on or in our network is important and necessary to enable us to ensure the integrity of our network and quickly identify if unauthorized personnel are accessing it.”
As compliance drops, BT termed the situation “poor”. But, BT also falls under scrutiny, as they have not revealed their compliance data.
It might seem somewhat of an exaggeration to associate these cyberattack fears with broadband engineers, but the reality is intricate. Common issues like accidental cable damage, theft, and vandalism could also derive from inadequate whereabouts compliance. Perhaps calling these cyber-attacks is a stretch, but the potential for the network’s compromise is valid.
Network operators are left clueless about the personnel accessing their system until compliance rates increase and enforcement improves. A plausible remedy, according to Vorboss’ CEO Tim Creswick, could be minimizing third-party contractors’ usage, which would ensure accountability for compliance errors.
It’s worth noting that the fibre rollout in the UK has seen an expedited expansion, with the emergence of over 100 altnets possibly contributing to the overlooking of security procedures. More companies are being granted access to BT’s network than before, perhaps increasing the risk.
In the coming week, BT has scheduled a meeting with industry representatives to debate further enforcement of compliance.
