Is defined in Section G9.7(a) (Data Communications Company Security Assessment Reports and Responses).
a “DCC Security Assessment Report” means a written report produced by the DCC Independent
Security Service Provider following a SOC2 assessment carried out by it for the purpose specified in
Section G9.2, which:
(i) sets out the findings of the DCC Independent Security Assurance Service Provider on all the
matters within the scope of that assessment;
(ii) specifies any instances of actual or potential non-compliance of the DCC with the obligations
referred to at Section G9.2(c) which have been identified by the DCC Independent Security
Assurance Service Provider; and
(iii) sets out the evidence which, in the opinion of the DCC Independent Security Assurance Service
Provider, establishes each of the instances of actual or potential non-compliance which it has
identified; and