What happened
NIST released (news item dated 8 October 2026, one day before the research window) two interagency reports on Open Radio Access Network security: (1) NIST IR 8625 (final) 'Open Radio Access Network (O-RAN) Near-Real Time RAN Intelligent Controller (RIC) Security', analysing security features of the RIC — the AI-enabled component that runs rApps/xApps for intelligent automated monitoring and control of 5G open RANs — and future directions for a zero-trust architecture; and (2) NIST IR 8623 (initial public draft) 'Cybersecurity Framework 2.0 Community Profile for Federal Agency O-RAN Deployment', mapping O-RAN ALLIANCE security specifications to CSF 2.0 outcomes, open for public comment through 2 November 2026. NOTE ON DATE: the publisher-dated news item is 8 October 2026, marginally outside the 2026-10-09 to 2026-10-15 window; included at Tier C for QA adjudication because the publication is real and the CSF profile comment period is itself in-window.
Why it matters
RAN Intelligent Controllers are AI-driven control-plane components that automate radio network management, and their security directly bears on AI-in-the-network risk for 5G/telecom critical infrastructure. The draft CSF 2.0 Community Profile gives federal agencies and telecom operators a concrete mapping of O-RAN ALLIANCE security specs to NIST CSF 2.0 outcomes, extending the framework to software-defined, AI-automated radio networks.
Action needed
Federal agencies and telecom operators deploying or planning O-RAN should submit comments on draft IR 8623 by 2 November 2026 and adopt the RIC security baseline in IR 8625 for AI-automated RAN control components.