（组织名称） Giesecke + Devrient (China) Technologies Co., Ltd.
（组织单位） Development Center of China
（成熟度） Maturity Level 3
（评估结束日期） Sep 22, 2020
（主任评估师） Bin Xu
（发起人） Xuefeng Liu
- Sampling Summary：
Sampling Factors: Location (Not Relevant: This OU is only based in Beijing. A common OSSP is established and implemented in this OU. Therefore, Location is not a relevant sampling factor.)
Customer (Not Relevant: The customers are in the industry of finance, telecom, etc. Each project must follow the common OSSP, no matter the target customer is. The customers do not introduce any differences of process implementation. Therefore, Customer is not a relevant sampling factor.)
Size (Not Relevant: All projects have similar size. It does not introduce any differences of process implementation. Therefore, Size is not a relevant sampling factor.)
Organizational Structure (Not Relevant: This OU includes Project Management Office, ST+S, and TCD, which are required to follow the same OSSP and focus on different functions and process areas. Therefore, Organizational Structure is not a relevant sampling factor.)
Type of Work: All projects are security device development. As there is not any other very obvious sampling factor identified, Type of Work is chosen with the values of Security Device Development and None.
Sampling Factor Values: Security Device Development (Type of Work): The project to develop the security devices.
None (Type of Work): The project other than the security device development.
Subgroups: Security Device Development: All projects developing the security devices.
80 People, 6 Basic Units
– Security Device Development