Is defined in Section G9.4 (The Data Communications Company Independent Security Assurance Service Provider).
For the purposes of Section G9.3, the “DCC Independent Security Assurance Service Provider” shall be
a person who is appointed by the DCC to provide security assurance services and who:
(a) is qualified to perform SOC2 assessments;
(b) has been approved by the Security Sub-Committee, following consultation with it by the DCC, as
otherwise being suitably qualified to provide security assurance services for the purposes of this
Section G9; and
(c) satisfies the independence requirement specified in Section G9.5.