First the maps used for various engineering purposes during project maturation are not actual but predicted. This is common.
The controllers are set with preliminary parameters based on predicted maps.
When machine is performance tested at manufacturer works, the actual maps can be made available and then the controller parameters can be further tuned. Performance test is usually done based on PTC10 type 2 whereby the machine will not be running under real conditions in terms of gas, speed and power. At this point the controllers are normally reasonably tuned as for a first shot.
After the machine is commissioned at site and plant start up activity commence, in certain cases (not sure if it is always a rule) a surge testing is performed with the real gas. This is where the anti-surge valve is slowly closed by an experienced operator and the operating point gradually brought towards a near surge condition, point at which a measurement is taken. This is a coordinated procedure elaborated by experienced crews and that also generally requires several parties to attend at site, including compressor OEM, controller's manufacturer (when not provided by compressor OEM), site engineers, user/owner and contractor. This testing allows another layer of optimization of the parameters of the controllers at site.
The anti-surge control system is a proprietary one. In general any major compressor vendor would have not trouble delivering, testing and maintaining that.