Security Accreditation Scheme
Recent years have been a phenomenal success for GSM, with hundreds of millions of customers worldwide. As the number of customers increase, so too does the importance of network operators' security.
There are numerous security risks faced by every network operator. Suppliers may introduce certain risks, the consequences of which will be borne by the operator, therefore network operators are dependent on their suppliers to control risks, and to provide confidence that adequate security is in place.
As the inherent security of the GSM system is fundamental to its global success, many GSM operators consider carrying out security audits of their key strategic suppliers, whose products have the most impact on the security of their GSM operations. Some GSM operators do not have the resources or expertise to undertake such audits, while other operators commit considerable time and resources to ensuring that adequate security procedures and processes are in place. The conduct of individual audits at all suppliers would impose a significant burden and cost on the industry.
With this in mind, the GSM Association manages the Security Accreditation Scheme (SAS), which is a voluntary scheme whereby suppliers subject their production sites and processes to a comprehensive security audit. The scheme is wholly funded by participating suppliers and a number of benefits accrue to network operators and GSM suppliers alike.
Advantages to Suppliers
- Ability to demonstrate commitment to security and reduction of risks for customers
- Reduced number of individual operator inspections
- Certification from the world’s leading wireless industry representative body
- Opportunity to receive a world-class security review of operations
- Provides a uniform approach to security audits
Advantages to Network Operators
- No longer need to invest, in financial or resource terms, in conducting individual audits
- Scheme is conducted by highly qualified individuals at no cost to the operator
- The scheme sets a rigorous security standard demonstrating supplier commitment to the highest levels of security
- Offers peace of mind that suppliers have implemented appropriate security measures
The GSM Association uses its broad reach to publicise those suppliers who have signed up to the scheme, highlighting to members the benefits of acquiring products from GSM Association security certified suppliers, and making an overview of audit results available to all GSM Association members.
Participation in SAS by some of the industry’s largest suppliers has played a major role in the success of the scheme to date. The Security Accreditation Scheme is currently open to all smart card suppliers, regardless of location, and the GSM Association welcomes the participation of all interested parties
To register an interest in participating or for further information contact the GSM Association at sas@gsm.org
|
