We completed the re-procurement process for the User Competent Independent Organisation (User CIO)/ Independent Privacy Auditor (IPA) who conduct Security and Privacy Assessments on behalf of two SEC Sub-Committees, Security Sub-Committee (SSC) and Privacy Sub-Committee (PSC). We are delighted to confirm that Ernst and Young (E&Y) has been awarded the contract and has already begun their mobilisation activity.
We would like to take this opportunity to welcome E&Y on board and to thank Deloitte, who has held the role since 2016, and delivered excellent service over the past decade. The move to E&Y is expected to bring benefits to Parties by reducing individual Security and Privacy Assessment costs, and introducing efficiencies in ways of working, lowering operational costs for the benefit of all SEC Parties.
There will be a short dual running period during the set-up and mobilisation phase to be completed by the end of October. E&Y will assume responsibility for all Assessment delivery from 01 November 2025 onwards. Deloitte will continue to provide support on any in-flight Assessments or those requiring their support for SSC review, which are anticipated to have completed by the end of January 2026.
All Parties with confirmed bookings for their Assessment – your booking dates will not change but will be transferred to E&Y. We will be reaching out to SEC Parties shortly to arrange introductory calls with the E&Y team ahead of your next Assessment to support this process.
Minor updates are being made to the SEC website to reflect the change in provider, and all guidance documentation will be reviewed during the mobilisation phase which is due to conclude at the end of October 2025.
If you have any questions about these changes, please contact the Security and Privacy team on via SSC@talan.com or PSC@talan.com