scope:

The present document treats the Lawful Interception (LI) and, where relevant, Retained Data (RD) capability being virtualized, taking into account the legal and physical challenges of doing so. This initial study is focused on the LI and RD aspects and establishes the fundamental security principles for generic platforms upon which the related groups can build. It includes a minimum set of security principles for those generic telecommunications platforms that are subject to LI that will allow the virtualized network functions to utilize the features necessary to afford them appropriate protection and at the same time to undertake appropriate activities (LI and RD). Establishing such a baseline will help the industry as a whole to be better protected against Cyber threats.