(a) An SAS must employ protocols and procedures to ensure that all communications and interactions between the SAS and CBSDs are accurate and secure and that unauthorized parties cannot access or alter the SAS or the information it sends to a CBSD.

(b) Communications between CBSDs and an SAS, between an ESC and an SAS, between individual CBSDs, and between different SASs, must be secure to prevent corruption or unauthorized interception of data. An SAS must be protected from unauthorized data input or alteration of stored data.

(c) An SAS must verify that the FCC identification number supplied by a CBSD is for a certified device and must not provide service to an uncertified device.