I.4 Modification of CAG ID list in the UE
33.5013GPPRelease 18Security architecture and procedures for 5G SystemTS
The following requirements apply to NAS messages that modify the list of CAG IDs stored in the UE:
– the AMF shall only send such a NAS message once NAS security has been established; and
– the UE shall only modify its list of CAG IDs after successful integrity verification of the integrity protected NAS message requesting such a modification.