Go back

How Selling Ground Stations Shapes Cybersecurity Strategies

Eutelsat Group's recent investigation into the sale of its ground station network, reportedly worth more than $850 million, marks a strategic shift that could potentially impact the satellite communications sector. Bloomberg first disclosed information about Eutelsat, noting the involvement of consultants in the search for potential buyers.

A subsequent press release from Eutelsat on May 6 confirmed the information, announcing a possible partnership with external investors for the terrestrial network. However, Eutelsat clarified that this is only a preliminary analysis, stressing the lack of certainty regarding the implementation of these plans.

The development follows Eutelsat's recent merger with OneWeb and its spin-off from the Airbus OneWeb Satellite joint venture.

The prospect of abandoning its network of ground stations prompts Eutelsat to evaluate different strategic paths:

  • Transition from current ground stations to a new generation of advanced infrastructure.
  • Joint ventures with infrastructure investment firms or other telecommunications companies.
  • Share in the company in exchange for investment.
  • Transition from current ground stations to gatewayless systems that rely on intersatellite communication links similar to the Rivada OuterNet project.
  • Transition from current ground stations to ground station as a service (GSaaS) models offered by providers such as Microsoft Azure or AWS Ground Station.
  • Direct sale of ground stations to GSaaS operators, continuing to use GSaaS solutions.
  • Leasing of free capacity to GSaaS operators.
  • Assessing GSaaS benefits and cybersecurity challenges

GSaaS.

Separately, it is worth noting that ground stations as a service (GSaaS) is emerging as a key innovation that allows satellite operators to use cloud networks of ground stations. This approach minimizes initial and operational costs by sharing infrastructure and paying for antenna time. GSaaS, dominated by major vendors such as AWS Ground Stations and Microsoft Azure Orbital Ground Station, also integrates cybersecurity measures into virtual private clouds, optimizing operational focus on specific tasks rather than infrastructure management.

Despite these benefits, GSaaS introduces cybersecurity considerations, aligning with the broader digital vulnerabilities that cloud services face. Potential threats include cyberattacks targeting cloud infrastructure, such as DDoS attacks, affecting business continuity and data security. In addition, compliance and data sovereignty issues remain relevant, particularly for European operators that rely on US GSaaS providers subject to US extraterritorial laws such as the Cloud Act of 2018.

What are the possible consequences for Eutelsat?

For Eutelsat, relinquishing ownership of terrestrial infrastructure could complicate expansion efforts in the security and defense sectors, which require strict data controls. The dominance of US-based providers in GSaaS limits alternatives for European operators concerned about sovereignty and regulatory compliance. Startups like Rivada Space Networks advocate using established cloud providers despite sovereignty concerns, emphasizing practicality over ideal cybersecurity scenarios.

In the context of Eutelsat's possible sale of its ground stations, cyber security becomes critical. A company must strictly monitor cyber security throughout the divestiture process to effectively mitigate risks. This includes conducting comprehensive due diligence to identify and remediate vulnerabilities such as unpatched software and Advanced Persistent Threats (APTs) that could compromise after-sales operations. Clear contractual agreements are required to establish responsibilities for cyber security incidents, data protection measures and communication protocols between Eutelsat and potential buyers. In addition, Eutelsat must ensure that sensitive data is securely removed from its ground station networks prior to any transaction to maintain data integrity and regulatory compliance.

Regardless of whether Eutelsat decides to start selling its ground stations, cyber security must be an integral part of maintaining business continuity and protecting its reputation in the satellite sector.

Author: Nessa, Cyber Journalist

Source: https://www.eutelsat.com

Photo: EUTELSAT GROUP/CASE STUDIES

Subscribe to our bi-weekly Linkedin newsletter

Subscribe

You can support TheSIGN by becoming our SATELLITE. Click to learn more about sponsorship.