SECMP0059 Amendments to SEC Security Assessments for Non-Domestic Suppliers and Other Users
Proposer
Gordon Hextall
Lead Analyst
SEC Change
Date raised
31/08/2018
Stage
Implemented
Implementation date
28/02/2019 (February 2019 SEC Release)
Latest update
This modification was implemented on 28 February 2019 (February 2019 SEC Release).
What is the issue?
This Modification seeks to provide clarity for non-domestic energy Suppliers on the type of User Security Assessment that is required for the second and third years after the initial Full User Security Assessment; and align security assessments for Other Users with the arrangements that currently apply to Small Suppliers to ensure proportionate assurance of the security risks.
What is the solution?
The SSC has considered the security risks that arise from the supply of energy to Non-Domestic Premises and has proposed that the threshold for the supply of Non-Domestic Premises determining the type of User Security Assessment Supplier Parties are subject to, be set at 50,000. To account for Supplier Parties that have a combined portfolio of Domestic Premises and Non-Domestic Premises, the SSC has proposed that these Supplier Parties use an equation to determine which User Security Assessments they should undergo. This equation considers the different levels of risk that different types of premises pose.
The SSC proposes that SEC Section G8.47 is amended to align it with the security profile of Supplier and Network Parties who supply gas or electricity to 250,000 or less Domestic Premises and that in year 2 of becoming a SEC Party, Other Users schedule a Verification User Security Assessment, instead of a User Security Self-Assessment.
This is the April 2024 SEC Modifications Working Group meeting, where we will be discussing: MP085B ‘Synchronisation of Smart Meter voltage measurement periods (meters currently installed)’ MP244 ‘Device Alerts
This is the April 2024 SEC Issues Group meeting, where we discussed: PPM continuity plan Please see the meeting summary here: SEC Issues Group Meeting Summary - April 2024 (CLEAR)
By subscribing you consent to receiving the SECAS newsletter.
Manage Cookie Consent
This website uses cookies. Please choose which categories of cookies you would like to enable.
Functional cookies
Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes.The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.