SECMP0057 'Users to notify SSC of a second or subsequent User System'

This modification seeks to clarify the User Security Assessment process where a User may be in the process of beginning to utilise a second or subsequent User System after having already satisfactorily completed the initial Full User Security Assessment.

Under the proposed solution, all Users will be required to notify the SSC before they begin to utilise a second or subsequent User System. This will enable the SSC to consider the security risks and to advise the User accordingly.

This modification seeks to require all Users to notify the SSC before they begin to utilise a second or subsequent User System. This will enable the SSC to consider the security risks and to advise the User accordingly once the SSC has made its decision on whether to wait to review the second or subsequent User System at its next annual review or to arrange an ad-hoc review.