This document assesses the effectiveness of the security of the business relationships between the different parties in the GSMA Remote Provisioning Architecture for Embedded UICC. Existing interfaces which are incorporated by reference into that architecture will, in general, be assumed adequately secure and will not be covered in detail in this document. Its purpose is to educate the industry with regards the relationships and dependencies between the different parties in the GSMA Remote Provisioning Architecture for Embedded UICC and to ensure that the trust model and management is well understood.