For both Security and Privacy assessments, we strongly recommend reading the Security Controls Framework (SCF) and/or Privacy Controls Framework (PCF). Both frameworks provide the basis for enabling a consistent level of review across all Users, and indicate the type of evidence which could be provided by a User to demonstrate compliance with its obligations. These should be used in addition to the SEC itself.

Please find direct links to the latest versions of the Controls Frameworks below which can be accessed once you have logged in:

• SCF Part 1 – User Assessment Methodology Latest Version
• SCF Part 2 – User Assessment Guidance Latest Version
• Privacy Controls Framework (PCF) Latest Version

You will need a Full User Security Assessment (and a Full User Privacy Assessment for Other SEC Parties) status of either Approved or Approved, subject to steps to complete the User Entry Process (UEP). If there are still steps that you need to complete with the DCC, you’ll need to complete them before completing the UEP and becoming eligible proceed into the Live DCC environment. Please find the UEP Guidance Notes for further information.

You can contact our dedicated Security & Privacy Team with any questions regarding the Security / Privacy Assessment process by emailing SSC@gemserv.com. We also offer a free one-hour session with the User Competent Independent Organisation (CIO), Deloitte LLP, to answer any specific questions prior to your assessment. Please contact the Security Team for further details.

Please visit our Book an Assessment webpage to submit your Assessment Application Form. This must be submitted to SECAS at least 12 weeks in advance of the date that which you wish to be assessed. More information on the assessments can be found below:

• Security Assessment
• Privacy Assessment

Please visit our Security  and/or Privacy Assessment Process webpages for an explanation of the requirements for each assessment, the estimated timescales and the current rate cards (which can be accessed once logged in to the website):

• Security Rate Card Latest Version
• User Security Assessments Timeline Latest Version
• Privacy Rate Card Latest Version
• User Privacy Assessments Timeline Latest Version

Please enter your name, organisation name (if applicable) and email address into the Newsletter Signup form in the bottom right corner of any SEC webpage to subscribe to our SECAS Newsletter.

You can unsubscribe at any time by contacting the SECAS Helpdesk. SEC Newsletters are sent by email once a month.

All previous SEC Newsletters can be accessed here.

SEC Parties can learn about CodeWorks and register to access CodeWorks by completing the online form at the bottom of the webpage here.

For more information on how to use CodeWorks and its features, please view our Guidance Notes once logged in.

If you have forgotten your password or can’t access your account, please either click here to reset it or contact secas@gemserv.com.

CodeWorks accounts are automatically disabled if they are inactive for 365 days.

SEC Parties can log in and visit the ID Allocation webpage to download the latest version of the ID Allocation Spreadsheet:

• ID Allocation Spreadsheet – Latest Version
• ID Allocation Spreadsheet – Latest Version Alternative Format

This spreadsheet contains the SEC Party name, Signifier, Organisation Number and ID Allocation range for all current and former Parties. It also contains the Market Participant Identifier (MPID) information associated with each Party. If your Party name or MPID information needs to be updated, please use the online Change in Party Details form.

For more information, please find the ID Allocation Procedure Guidance Notes.

SEC Parties can complete the online form on our Registration page to request a website account. Once your account has been approved by the Party Engagement Team, you will receive your log in details and will then be able to log in and download SEC Party related documents.

Logged in SEC Parties will be able to access SEC Party only documents from the Document Download Centre which the SEC Panel Information Policy classifies as GREEN. You will also be able to access the Member’s Only Area which contains a wide range of useful information to help you comply with your SEC obligations.

If you can’t remember your password, please either use the Forgot Password link or contact SECAS@gemserv.com.

To change your SEC Party Details, please access and complete the online Change in Party Details form.

Please complete the form with any details that have changed and state if you consent for the DCC (and / or the Alternative Home Area Network Company (Alt HAN Co) for Supplier Parties) to be notified. SECAS will review the information provided and action the changes as soon as possible.

When completing the online form, please review the four spreadsheets below to see if they require any changes. Anyone can access the SEC Parties List. SEC Parties can access the other three spreadsheets once logged in. If you do not yet have a website account, please register here.

• The SEC Parties List to see if the name of your SEC Party / Voting Group name is correct or needs to be changed. This list also displays if you have completed the DCC’s User Entry Process (UEP).
• The SEC Party Details List to see if your VAT number, registered address, addresses for invoices / notices under the SEC, Energy Licences, affiliates or Unique Electricity & Gas Identifiers are correct or need to be changed.
• The Operations Contact List to see if your contacts that manage DCC Critical Alerts are correct or need to be amended. Guidance to Critical Alerts can be found here.
• The ID Allocation spreadsheet to see if your Party name or Unique Electricity / Gas Identifiers are correct or need to be changed.