Two independent auditors conduct each audit together by reviewing documentation, conducting interviews with key individuals and carrying out tests in key areas of the supplier’s facility. The independence and professionalism of the audit team is of great importance to the integrity of the scheme.
To ensure the GSMA secures the services of the best qualified and most professional auditing companies, it periodically conducts a competitive tender for the provision of SAS auditing services.
The auditing companies currently selected by the GSMA for conducting SAS audits at subscription management service provider sites are:
SRC Security Consulting
The auditing companies currently selected by the GSMA for conducting SAS audits at UICC production sites are:
Planned invitation to tender for the provision of SAS auditing services
GSMA will be running tenders beginning in October 2021 for the provision of SAS-UP and SAS-SM auditing services (services to be provided from February 2022). Companies interested in receiving the SAS-UP and/or SAS-SM auditing services tender packages are invited to contact email@example.com to register their interest and to exchange a non-disclosure agreement.