Security Accreditation Scheme in GSM

Security Accreditation Scheme

Recent years have been a phenomenal success for GSM, with hundreds of millions of customers worldwide. As the number of customers increase, so too does the importance of network operators' security.

There are numerous security risks faced by every network operator. Suppliers may introduce certain risks, the consequences of which will be borne by the operator, therefore network operators are dependent on their suppliers to control risks, and to provide confidence that adequate security is in place.

As the inherent security of the GSM system is fundamental to its global success, many GSM operators consider carrying out security audits of their key strategic suppliers, whose products have the most impact on the security of their GSM operations. Some GSM operators do not have the resources or expertise to undertake such audits, while other operators commit considerable time and resources to ensuring that adequate security procedures and processes are in place. The conduct of individual audits at all suppliers would impose a significant burden and cost on the industry.

With this in mind, the GSM Association manages the Security Accreditation Scheme (SAS), which is a voluntary scheme whereby suppliers subject their production sites and processes to a comprehensive security audit. The scheme is wholly funded by participating suppliers and a number of benefits accrue to network operators and GSM suppliers alike.


Advantages to Network Operators

* No longer need to invest, in financial or resource terms, in conducting individual audits
* Scheme is conducted by highly qualified individuals at no cost to the operator
* The scheme sets a rigorous security standard demonstrating supplier commitment to the highest levels of security
* Offers peace of mind that suppliers have implemented appropriate security measures


Advantages to Suppliers

* Ability to demonstrate commitment to security and reduction of risks for customers
* Reduced number of individual operator inspections
* Certification from the world’s leading wireless industry representative body
* Opportunity to receive a world-class security review of operations
* Provides a uniform approach to security audits