5G Non-Standalone, or NSA, is a 5G deployment mode that uses an existing 4G core and control plane while adding 5G radio access. The device anchors to the legacy network for signalling and mobility, then uses 5G New Radio for data where available. It is an interoperability architecture, not a separate core network.
How 5G Non-Standalone Works
5G Non-Standalone is a transition architecture, not a full 5G core. It keeps the LTE core and control plane in charge while 5G New Radio adds higher-capacity radio access where coverage and device support allow.
That split matters because the user experience depends on both generations working together. Mobility, signalling, and many session decisions still follow legacy 4G assumptions, so NSA behaves more like an overlay than a clean break from the older network.
Why NSA Exists in 5G Rollouts
NSA let operators introduce 5G radios without replacing the entire core network on day one. That lowered deployment friction, reused existing investments, and gave carriers a path to market before the standalone 5G core was broadly available.
For organisations, the practical lesson is that “5G enabled” can mean very different things. An NSA deployment may improve capacity and radio performance while leaving core-network dependency, policy control, and interoperability constraints largely unchanged.
That makes 5G Security Guide useful background reading when you need the broader control-plane picture, including 5G Security Guide.
Security and Operational Implications
NSA inherits the trust boundary of the legacy core, so its security posture is only as strong as the older signalling, authentication, roaming, and transport controls that remain in path. The 5G radio layer can improve performance, but it does not automatically modernise the security model beneath it.
That creates mixed-mode complexity: defenders have to reason about both 4G and 5G behaviour, including handovers, policy enforcement, and where control-plane traffic still terminates. Misunderstanding that split can lead to misplaced confidence in a rollout that is still partly anchored to older infrastructure.
Where NSA Fits in the 5G Transition
NSA is best understood as a deployment phase on the road to standalone 5G, not as a separate end state. It is valuable when the priority is speed of rollout, incremental coverage, and reuse of existing mobile infrastructure.
As networks mature, standalone 5G becomes the cleaner architecture for new service models, but NSA remains relevant wherever operators are balancing cost, compatibility, and deployment speed. In glossary terms, the important distinction is architectural: NSA describes how 5G is introduced, not a unique security standard or a different radio technology.
Standards & Framework Alignment
This section maps relevant standards and security frameworks to the operational risks and controls described in this guidance.
NIST SP 800-53 Rev 5, CIS Controls v8 and NIST CSF 2.0 set the technical controls, while ISO/IEC 27001:2022 defines the regulatory obligations.
| Framework | Control / Reference | Relevance |
|---|---|---|
| NIST SP 800-53 Rev 5 | SC-7 — Boundary Protection | NSA keeps legacy and 5G trust boundaries in path, making boundary enforcement material. |
| IA-2 — Identification and Authentication (Organizational Users) | NSA still relies on legacy core signalling and authentication for attached devices and users. | |
| Recommendation — Segment LTE and 5G control paths with enforced boundary controls. Preserve strong authentication at the core where NSA still anchors sessions. | ||
| CIS Controls v8 | CIS-12 — Network Infrastructure Management | NSA is a network transition architecture that depends on disciplined infrastructure change and control. |
| Recommendation — Track NSA rollout dependencies and harden the mixed 4G/5G infrastructure path. | ||
| NIST CSF 2.0 | PR.AA-05 — Least Privilege | NSA deployments require careful privilege and access scoping across legacy and new network components. |
| Recommendation — Limit administrative and service access across both LTE and 5G control planes. | ||
| ISO/IEC 27001:2022 | A.8.20 — Network security | NSA materially changes network architecture and therefore the controls protecting communication paths. |
| Recommendation — Apply network security controls to the interworking path between LTE and 5G components. | ||
Related resources from NHI Mgmt Group
Deepen Your Knowledge
Free weekly newsletter
Subscribe to the NHI & AI Identity Journal
The latest on NHI and Agentic AI security – articles, research, breaches, news and events every week.
Bonus 33% off our NHI Course when you subscribe.
Reviewed and updated by the NHIMG editorial team on October 29, 2026.
NHI Mgmt Group — the #1 independent authority on Non-Human Identity, IAM, and Agentic AI security. nhimg.org