SRIDA-GSMA-SAS-RTP-001 · Version 1.0 · 413 pages · by Rajendra Bodda, CISO
GSMA Security Accreditation Scheme (SAS-UP & SAS-SM) FS.18 — Requirements, Implementation Guidance & Audit Testing Procedures
Prepare a SIM or eSIM site for SAS audit with confidence.
413
pages
121
requirements
5
network models
Why this manual matters
SAS accreditation is mandatory for UICC production and eSIM subscription-management sites, and the audit is unforgiving: two auditors on site, every requirement in scope, and findings that can delay a certificate.
This manual covers all 60 sub-sections and 121 requirements of GSMA FS.18 for both SAS-UP and SAS-SM, with the scope symbol of each requirement, what the Audit Team looks for, practical implementation, and on-site testing procedures an internal auditor can actually perform.
Five reference network models — from a single-site UP facility to a multi-tenant SM-DP+ data centre — show how the IT and network requirements fit together.
What’s inside
All FS.18 requirements
60 sub-sections and 121 requirements with applicability (All, UP, SM, CM, DC), interpretation, tests and evidence.
Annex A
Requirements for remote access and their mapping, explained.
Implementation framework
Scope, security management system, key management and HSMs, production and logistics, IT and network architecture.
Five network models
Reference architectures for UP and SM sites, plus readiness checklists and templates.
Who it is for
- Security managers at SIM card and eSIM sites
- SAS-SM and SM-DP+ operators
- Internal auditors preparing for SAS audits
- Consultants supporting SAS certification
Preview before you buy
The free sample has 12 pages: the cover and document control pages, the opening of the contents, the start of Chapter 1 and one complete requirement entry with its testing procedures.
Open the sample PDF in a new tab →How you receive it
- Pay ₹970 by UPI QR and enter your UPI reference at checkout.
- We verify the payment against our bank record, usually within one business day.
- You receive an email with a secure download link (valid 30 days, up to 5 downloads; you can request a fresh link any time).
- Your PDF is stamped with your name, email and a unique licence code on every page.
- For 12 months, every new version of this manual is emailed to you automatically.
Please note
Independent Srida IT guidance; not a GSMA publication and does not confer SAS certification. It does not reproduce GSMA text — use it with the official FS.18 and related SAS documents.
Purchases are subject to the Terms and Conditions.