A coverage obligation is a regulatory rule that requires a network provider to serve a specified area or population. In telecom, it can mean keeping service available in rural regions, along transport routes, or for a minimum share of users. The obligation is not a security control by itself, but it strongly influences how networks are designed and operated.
In cyber security, coverage obligations matter because availability is often the first target of attacks and failures. If a provider must keep service running in a defined area, it may need stronger redundancy, better monitoring, hardened site access, and faster restoration procedures. Attackers can exploit this pressure by causing outages through DDoS, sabotage, jamming, or equipment compromise, knowing that recovery is time-sensitive. Defenders and regulators use coverage obligations to measure resilience and enforce continuity, making them an important part of critical-infrastructure protection.