FCC Expands Covered List to Include Foreign-Produced Routers

The Federal Communications Commission’s (FCC) latest expansion of the "Covered List" to include routers produced in foreign countries represents a significant escalation in the United States' strategy to decouple its critical infrastructure from perceived adversarial influence. This move, formalized under the Secure and Trusted Communications Networks Act of 2019, fundamentally alters the procurement landscape for telecommunications providers across the country. By designating these devices as posing an "unacceptable risk" to national security, the FCC is effectively mandating a shift toward domestic or "trusted" international hardware, a transition that carries profound implications for both cybersecurity and the economics of internet service provision.

Historically, the Covered List has focused on specific corporate entities, most notably Chinese giants like Huawei and ZTE. However, the pivot toward a broader category—"routers produced in foreign countries"—suggests a more systemic approach to supply chain security. This change acknowledges that the risk is not merely tied to a single brand name but to the geopolitical environment in which the hardware is manufactured. Routers serve as the central nervous system of any network, managing the flow of data and enforcing security protocols. If these devices are compromised at the manufacturing or firmware level, they can serve as silent conduits for data exfiltration or as kill-switches in the event of a geopolitical conflict.

“

The FCC’s ruling prohibits the use of federal subsidies, such as those from the Universal Service Fund (USF), to purchase, lease, or maintain equipment on the Covered List.

The immediate impact of this regulation will be felt most acutely by small and rural internet service providers (ISPs). These organizations have historically relied on cost-effective hardware from foreign manufacturers to bridge the digital divide in underserved areas. The FCC’s ruling prohibits the use of federal subsidies, such as those from the Universal Service Fund (USF), to purchase, lease, or maintain equipment on the Covered List. For many smaller operators, these subsidies are the lifeblood of their business models. Without access to affordable foreign-made routers, these ISPs face a dual challenge: the higher capital expenditure required for "trusted" hardware and the potential technical debt of replacing existing infrastructure that has suddenly become a liability.

Furthermore, this regulatory shift is likely to accelerate the adoption of Open Radio Access Network (Open RAN) architectures and other software-defined networking solutions. By decoupling hardware from software, carriers can theoretically mitigate the risks associated with any single hardware vendor. However, the transition to Open RAN is still in its relatively early stages and presents its own set of integration and security challenges. In the interim, domestic manufacturers and those in allied nations stand to gain significant market share, provided they can scale production to meet the sudden surge in demand.