The scheme is here to help mobile network equipment vendors improve security levels. Specifically, it covers equipment that supports functions defined by 3GPP and deployed by MNOs on their networks.
One of the scheme’s strengths is that it’s a combination of two services. The NESAS Product Development & Lifecycle Management Process Audit + the NESAS Product & Evidence Evaluation. You need to complete the audit before the evaluation.
First, the vendor’s production processes are assessed by an auditor, following the NESAS set of security requirements. Then, the final product is security tested and evaluated by a test laboratory. Here, they ensure that the vendor has adhered to their own assessed processes.
Together, these services provide an industry-wide assurance framework and introduce a baseline security level that the mobile industry should be reaching
What are the benefits of the GSMA Network Equipment Security Assurance Scheme for network equipment vendors?
- Highlights your ability to achieve and maintain security levels
- Unified set of security requirements eases network product development and global sales
- Avoids globally inconsistent and conflicting security requirements, as well as conformance fragmentation
- One global scheme, recognised by all, decreases the duplication of work and security testing in multiple markets
- Demonstrate to your customers (or prospective customers) that your products reach the universal security standards required by the industry globally
- Promotes ongoing improvement and risk reduction
- Reduces workload in responding to operator procurement processes
- You have choice, as you can select which appointed auditor to use, as well as your preferred Authorised GSMA NESAS Test Laboratory
- Encourages security by design culture across the network equipment vendor community
Another of the key benefits for network equipment vendors is that the GSMA promotes a list of Network Equipment Security Assurance Scheme participants to network operators and other stakeholders through its global channels.
If you would like to know more or speak to someone about GSMA NESAS, please get in touch