An independent auditing company conducts each vendor development and product lifecycle process audit by reviewing documentation and conducting interviews with key individuals to assess compliance with the defined security requirements. The independence and professionalism of the audit team is of great importance to the integrity of the scheme.
The GSMA appoints a panel of Auditors, from which participating Equipment Vendors can select one to audit their processes. To ensure the GSMA secures the services of the best qualified and most professional auditing companies, it periodically conducts a competitive tender for the provision of NESAS auditing services with selection criteria agree by NESAS Oversight Board.
The auditing companies currently selected by the GSMA for conducting NESAS audits are;