Two independent auditors conduct each audit together by reviewing documentation, conducting interviews with key individuals and carrying out tests in key areas of the supplier’s facility. The independence and professionalism of the audit team is of great importance to the integrity of the scheme.
To ensure the GSMA secures the services of the best qualified and most professional auditing companies, it periodically conducts a competitive tender for the provision of SAS auditing services.
The auditing companies currently selected by the GSMA for conducting SAS audits at subscription management service provider sites are:
SRC Security Consulting
The auditing companies currently selected by the GSMA for conducting SAS audits at UICC production sites are: