The first thing is to really look at how companies have implemented SMS. Unfortunately, some companies may see it as a manual and not a pervasive process that has to take place throughout the company, which has people in a constant mindset of looking for things that can go wrong. I think, first, the regulator has to look at how companies have implemented SMS and not just look at whether they have a process in place, but if that process is effective.
On April 1st, 2014. See this statement in context.