Member states have been given until the end of April to draw up security measures for 5G networks.