Fraud and Security Group
The GSM Association’s Fraud and Security Group (FASG) is an amalgamation of the existing and separate Fraud Forum and Security Group. The Group has been established to drive the industry’s management of fraud and security matters related to GSM technology, networks and services, with the objective to maintain or increase the protection of mobile operator technology and infrastructure and customer identity, security and privacy such that the industry’s reputation stays strong and mobile operators remain trusted partners in the ecosystem. FASG provides an open, receptive and trusted environment within which fraud and security intelligence and incident details can be shared in a timely and responsible way.
The Fraud and Security Group is working on a range of topics in the following areas:
- Protecting customers against fraud
- Detecting and preventing fraudulent access to mobile services
- Identifying abuses of service terms & conditions
- Fast identification of fraud committed while roaming
- Mobile operator brand and reputational protection
- Minimising wholesale risks to mobile operators
- Cloud service risks and controls
- NFC security
- LTE security network configurations
- LTE roaming security
- Infrastructure security and testing
- SS7 security
- Mobile malware
- Mobile device and application security
- IP interconnect security requirements
- Security analysis of VoLTE services
What the Fraud and Security Group Does
- Continuously assess the global fraud and security threat landscape, analyse the associated risks for network operators and their customers and define and prioritize appropriate mitigating actions.
- Assess threats and actual implementation across the globe and report on the state of the industry at regular intervals.
- Specify technical fraud solutions and security enablers such as security algorithms and drive their adoption by suppliers and network operators.
- Review and analyse new and existing architectures, services and solutions and conduct fraud and security risk assessments of these to ensure adequate protection by design.
- Define fraud and security requirements and minimum standards for the industry and drive implementation and compliance with those standards.
- Promote fraud and security awareness across the industry.
- Establish processes to handle industry level fraud or security incidents and support these in operation.
- Assist members with the investigation of fraud and security incidents.
Fraud and Security Group meetings are held three times per year, with conference calls used to progress work between physical meetings.
Participating companies attending these meetings should make adequate travel budget provision to travel to these meetings.
How to Get Involved
If you would like more information about the Fraud and Security Group, please contact FASG@gsma.com. If you are interested in contributing and attending Fraud and Security Group then please contact email@example.com to become a GSMA member and to join this group.
Communications to the Fraud and Security Group, including industry liaison statements, should be sent to FASG@gsma.com.
Meet the Team