2025年供应链工具箱报告.pptxVIP

June2025

Copyright©2025GSMA

Contents

Executivesummary5

Productandservicedevelopmentstages7

Productanddevelopmentlifecycle6

Toolchainprotection9

SBOMandHBOM10

Secure-by-design7

Securesoftwaredevelopment8

Softwarecompositionanalysis9

Open-sourcesoftware8

Cloudsecurity15

GSMAeUICCSecurityAssurance13

GSMANESAS12

GSMASAS12

Remoteaccess15

Regulation11

Managedserviceprovidersecurity13

Playingalonggame13

DevSecOps9

MSPadvisories14

MSPsecuritypractices14

SupplyChainToolbox

0033/25

Contents

Lifecyclestagesfromprocurement,throughin-lifeandto

decommission16

GSMAInternationalRevenueShareFraud

(IRSF)Prevention21

GSMAMobileTelecommunicationsSecu