SECMP0042 'Amendment to SMKI Services to provide DCC Users and/or SMKI Participants with Authorised Responsible Officer (ARO) Statistics and Information'

Over time, Authorised Responsible Officer (ARO)-related credentials may become lost, stolen, or misused with malicious intent (for example, creating ‘fraudulent’ (but valid) Smart Metering Key Infrastructure (SMKI) Organisation Certificates or SMKI Device Certificates. A DCC User and/or a SMKI Participant must be able to obtain up-to-date information to maintain an accurate view of the use of credentials granted to an ARO. Understanding ARO activities on SMKI Services and the SMKI Repository Services is crucial for maintaining oversight of security sensitive activities and for taking steps to maintain appropriate ARO entitlements (e.g. identification of unused, unnecessary dormant accounts).

Currently, there is no ‘business as usual’ reporting mechanism that a DCC User can utilise to understand the activity associated with the credentials issued to their AROs.

This Modification Proposal seeks to place an obligation on the DCC to develop a reporting mechanism which can be used by DCC Users and/or SMKI Participants to obtain up-to-date information on the use of ARO credentials on SMKI-related services.