Lofty clouds over Canadian Rocky Mountains in the distance
Lofty clouds over Canadian Rocky Mountains in the distance

How can telcos navigate a world of evolving risks?

Related topics

As the risks facing telecommunication providers continue to evolve and expand, here’s our ranking of the 10 top risks they face in 2026.


In brief
  • Risks related to technology transformation, network performance, geopolitics and changing customer needs have elevated telcos’ threat agenda in the past year.
  • While geopolitical frictions create risks to telcos’ supply chains, governments’ policy responses such as sovereign cloud can also present opportunities.
  • Telcos must take an enterprise-wide view of risk and incentivize risk-aware behaviors while aligning risk management with long-term strategic objectives.

As telecoms operators embark on 2026, our latest analysis confirms that the rapid change in their risk universe we noted last year is continuing unabated. In particular, it’s increasingly clear that telcos are not immune to today’s febrile geopolitical environment — and must be ready to respond nimbly to its effects on their service offerings, operations and supply chains. At the same time, they must keep a keen eye on the changing needs and priorities of customers, who are ever more anxious about issues ranging from getting ripped off financially to having their data stolen or misused.

Combined with the rising risks related to emerging technologies — especially the adoption of artificial intelligence (AI) — and the increasing challenges around network performance, all of this signals a need for telcos to reorientate their risk roadmaps, with a focus on the interconnectedness among apparently distinct threats. But they must also remain alert to the potential upside of many risks, including the opportunities they offer to unlock new forms of value by taking the right actions — especially around technology and talent.

As in previous years, our analysis broadly categorizes telcos’ risks into four types: compliance, operational, strategic and financial. Within this overarching framework, much has changed over the past 12 months.

While the top risk remains the same — “underestimating changing imperatives in privacy, security and trust” — there are substantial changes lower down the list. Two new risks enter the top 10 — “insufficient adaptation to the evolving geopolitical environment” and “failure to respond effectively to changing customer needs” — while two more move up the ranking, with “ineffective transformation through new technologies” rising to second place.


Top 10 Risks for Telecommunications in 2026

Access the full report for further detailed insights to help you to stay resilient through challenging times.


Risk 1: Underestimating changing imperatives in privacy, security and trust

Telcos’ responsible AI practices are falling short in important respects – while their cybersecurity functions feel under-prepared for change.

The EY AI Sentiment Index Survey 2025 reveals a continuing consumer trust deficit toward AI. While 82% of consumers have knowingly used AI tools in the past six months, only 48% believe the benefits outweigh the potential negatives. This is especially worrying for telecoms companies, since they appear to be lagging other sectors in adopting measures to improve AI trust: only 59% of telcos say they have a robust methodology for identifying, assessing and mitigating risks associated with AI, against 66% of all respondents.

A further concern is that telcos’ cybersecurity functions are struggling to broaden their role and remit, with 68% of telco CISOs admitting they find it difficult to articulate the value the cybersecurity team delivers beyond risk protection.


Risk 2: Ineffective transformation through new technologies

The rapid transition to AI is creating organizational challenges as the need to decommission legacy IT and networks becomes urgent.

While telcos are moving at pace to harness the power of AI, several factors are hampering their efforts to scale up their AI initiatives. According to the EY Responsible AI Pulse Survey, telco CEOs’ top concerns around AI adoption include resource constraints and the difficulty of developing effective governance frameworks. Barriers such as these are causing companies to adopt dramatically divergent approaches to AI: while 33% are planning to accelerate AI investments, almost as many — 32% — are scaling back or reconsidering them. The challenges around new technologies are compounded by fast-increasing pressures to decommission legacy IT and network elements, a vital complement to telcos’ AI-native ambitions.

Risk 3: Inadequate talent, skills and culture management

The skills shortfall is difficult to solve, while organizational culture often remains resistant to change.

Telcos’ need for new skills is being driven by developments ranging from the advancing automation of network and IT functions to in-house platform development and the integration of multi-vendor tech solutions.


Third-party research1 shows such factors are driving up demand for specific skills in areas like cybersecurity, AI and machine learning (ML), IT infrastructure and data science. Crucially, many of these roles are especially difficult to fill — causing telcos to focus on approaches like upskilling, temporary recruitment from tech partners, and buying in skills through company acquisitions.


However, even when telcos have succeeded in putting the right skills in place, they’re finding that changing ingrained workforce cultures and adapting to new working methodologies is far from straightforward.


Risk 4: Inadequate network value proposition and performance

Take-up of high-speed connectivity is lagging in many markets, while new factors are conspiring to cause network outages.

In several European countries, the increasing availability of fiber-to-the-home (FTTH) networks is not being matched by higher adoption — with FTTH Council3 data showing that take-up ranges from 91% in Spain to just 27% in Germany. This diversity reflects the multiplicity of factors that can influence FTTH adoption, from pricing to the strength of demand for bandwidth-intensive applications like cloud gaming.

As the choice of high-speed connectivity options continues to widen, telcos must differentiate themselves in new ways to avoid price erosion. But their efforts to reposition themselves are being complicated by a proliferation of the factors contributing to network outages, such as extreme weather events and power “brown outs.”

Risk 5: Insufficient adaptation to the evolving geopolitical environment

A backdrop of geopolitical tensions adds to the external uncertainties facing telcos — but national technology sovereignty strategies also signal upside.

In the  latest EY CEO Outlook Study, 22% of telco leaders cite geopolitical tensions as a threat to growth, alongside trade and fiscal policies (13%) and broader macroeconomic uncertainty (18%). While telcos’ direct exposure to tariffs is limited, the same is not true of their upstream device and network suppliers — raising the risk that higher device costs may further lengthen consumers’ handset replacement cycles.

 

That said, the challenges created by geopolitical tensions are balanced by some opportunities to unlock new forms of value. For example, national technology sovereignty agendas may let telcos adopt a more explicit role as infrastructure champions and data guardians. Meanwhile, the spate of new cyber regulations and AI policies further reinforces the need for robust data protection measures and responsible AI management.


Risk 6: Inability to take advantage of new business models

Enterprise customers lack understanding of new business models, while realizing emerging service opportunities requires telcos to make some hard choices.

While telcos are making good progress with rolling out new service offerings for enterprises, these customers’ low awareness of new B2B propositions is limiting adoption. The EY Reimagining Industry Futures Study finds that 24% of enterprises across sectors have low or no awareness of network application programming interface (API) solutions, a knowledge gap that widens to 30% in manufacturing.
 

A silver lining may be offered by governments’ policy shifts, which — as we mentioned earlier — are opening new service possibilities for telcos in areas like sovereign cloud and AI infrastructure. But seizing these opportunities will demand the right optionality and ecosystem approaches: for example, sovereign cloud solutions can be offered either directly, via bilateral partnerships, or via dedicated joint ventures.

Risk 7: Ineffective engagement with external ecosystems

Telcos’ reliance on partnerships and collaboration is increasing, as their relationships with technology companies become more complex and multisided.

With new B2B and B2C service propositions demanding greater collaboration, telcos’ partnerships are growing in size and scope. Horizontal collaboration between telcos has seen a strong uptick in recent quarters, as they look to expand their addressable markets and monetize services like APIs and AdTech.

Vertical partnerships with technology firms are also on the rise: In the EY CEO Outlook study, telco respondents cite technology sharing (49%) and combining complementary resources such as distribution (43%) as the leading drivers of joint ventures and strategic alliances. At the same time, telcos’ ecosystem relationships are becoming increasingly multi-sided, with EY research finding that telco CXOs regard a range of technology and media companies — from hyper-scalers to content distributors — as both partners and potential competitors.


Risk 8: Failure to respond effectively to changing customer needs

Consumer concern over digital safety is increasing, while younger people often lack confidence when engaging with connectivity offerings.

Consumers are increasingly anxious about online safety:
in the EY Decoding the Digital Home study, the proportion of consumers saying they’re
”very concerned” about harmful online content has risen from 38% in 2022 to 47% in 2024. A substantial proportion (40%) are also worried by excessive screen time.
 

While governments are aware of these fears and implementing policy actions in response, telecoms operators offering services to families and teenagers face a need to navigate a complex stakeholder landscape. A further complicating factor is that younger customers appear to experience greater challenges with telecoms services than their older peers. Decoding the Digital Home also finds that 25- to 34-year-olds rank highest among all demographic groups for finding connectivity packages difficult to understand.

Risk 9: Poor management of the sustainability agenda

While telcos are making progress on reducing their impacts, retaining focus on sustainability improvements will be critical.

According to GSMA benchmarking,4 telcos are improving their performance over time against key environmental, social and governance (ESG) metrics, with 75% of GSMA’s 24 participating operators reporting lower Scope 1 and 2 emissions compared with previous reporting periods. Nearly all also indicate they have implemented a sustainable procurement policy.
 

However, sustained commitment to future timelines for improving ESG performance is uncertain: the EY CEO Outlook Survey finds that 60% of telco leaders are rethinking the timescales for their sustainability promises. Meanwhile, the EY Telco of Tomorrow study shows that operators are planning a wide range of ESG-related actions over the coming five years: balancing a number of competing ESG priorities going forward will be essential.


Risk 10: Inadequate operating models to maximize value creation

As telcos continue to centralize their business operations and engage in M&A, industry operating models are being stretched in new directions.

Enterprises’ transition toward a global business services (GBS) model is ongoing, with industry research5 showing that 61% of enterprises are committed to GBS — albeit at varying stages of maturity in terms of implementation. While improving cost-efficiency remains an important goal, GBS is also delivering other benefits ranging from digitization and workforce optimization to enabling new services.
 

Meanwhile, telcos’ rising appetite for M&A is a further catalyst for operating model refinements: the EY CEO Outlook Survey finds that 77% of telco leaders are confident they can leverage M&A to drive growth and scale. However, telcos need to be aware of the inherent risks that more ambitious deal-making can bring in areas like skills, culture, technology and stakeholder management.


Next steps for telecommunications operators to mitigate risks in a fast-changing landscape

As operators consider how best to mitigate the leading risks that we’ve highlighted, they should continue to scan the horizon for new threats, while also evaluating the evolving impact of existing risks and looking to convert apparent challenges into opportunities. Across these actions, it’s key to understand how the concept of risk itself is evolving, as it is reshaped by four defining characteristics — with today’s risks becoming increasingly nonlinear, accelerated, volatile and interconnected (NAVI). Thriving in a NAVI world demands new approaches to strategy and risk management, together with an ability to align the two. Against this background, we recommend telcos take three actions.

1. Revisit your risk roadmap

Bring leaders across the organization together to explore and align on the evolution of your risk management, ensuring that this is co-developed and jointly owned by risk leadership and senior management. Take care to assess current and prospective risk categories, recognizing that risks can be ambiguous and fast-changing, and may signal upside potential. Focus on the interconnectedness between different risks, as well as the changing complexion of risks as they affect the macro environment, your industry ecosystem and your organization.

2. Double down on cultural change and metrics management

Telcos’ transformation horizons are already expanding to encompass new possibilities unlocked by frontier technologies and associated re-skilling and upskilling. Ensure that your risk management culture evolves alongside broader innovations in working methodologies and governance, while also recognizing and highlighting how risk insights empower employees to make better business decisions. And increase the focus on metrics and incentives that encourage behavioral changes that go beyond risk containment to boost business enablement.

3. Execute end-to-end risk management

Maximize your holistic approach to risk management with clear processes for identifying, evaluating and responding to risks across the organization. Ensure that executive risk owners work with cross-functional teams to track risks and assess their impact on people, systems and processes. Pay particular attention to identifying new risks and proactive risk monitoring. Meanwhile, undertake regular reviews of risk containment plans and controls effectiveness, helping to convert robust risk coverage into effective risk mitigation and long-term strategic resilience.

Summary

Entering 2026, telecoms operators are confronted by a fast-expanding universe of risks that are increasingly nonlinear, accelerated, volatile and interconnected. With risks around transformation, network performance and geopolitics rising especially strongly, telcos seeking to maintain their growth and resilience must bind their strategy and risk management more closely together than in the past. The keys to success? Rethinking the approach to risk enterprise-wide, while building risk awareness across the workforce — and putting in place end-to-end risk processes that unite and draw on all areas of the business.


About this article

Authors