This Party Service Line (PSL) defines the non-functional requirements that Supplier Agents, LDSOs and CVA MOAs shall comply with to fulfil their functions under the BSC. In this PSL certain common responsibilities and obligations are expressed to be undertaken by all of the following Market Participants.

1.0.0

<div data-id="1-1.1" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">1.1 Purpose and Scope of this PSL</div>

<div data-id="1-1.2" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">1.2 BSC Provision</div>

<div data-id="1-1.3" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">1.3 Acronyms and Definitions</div>

<div data-id="1" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">1 Introduction</div>

<div data-id="2-2.1" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">2.1 System Availability</div>

<div data-id="2-2.2" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">2.2 Service Availability</div>

<div data-id="2-2.3" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">2.3 Backup and Disaster Recovery</div>

<div data-id="2" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">2 Service and System Availability</div>

<div data-id="3-3.1" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">3.1 Physical and Logical Security</div>

<div data-id="3-3.2" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">3.2 Security of Hardware Access</div>

<div data-id="3-3.3" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">3.3 Security of Software Access</div>

<div data-id="3-3.4" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">3.4 Access Controls</div>

<div data-id="3" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">3 Security/Access</div>

<div data-id="4-4.1" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">4.1 General</div>

<div data-id="4-4.2" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">4.2 Access to Non-Computerised Records</div>

<div data-id="4" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">4 Data Confidentiality</div>

<div data-id="5-5.1" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">5.1 Operational Controls</div>

<div data-id="5-5.2" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">5.2 Retention of Records</div>

<div data-id="5-5.3" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">5.3 Processing Continuity - Risk</div>

<div data-id="5-5.4" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">5.4 Processing Continuity - Impact</div>

<div data-id="5-5.5" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">5.5 Interface Controls</div>

<div data-id="5" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">5 Processing</div>

<div data-id="6-6.1" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">6.1 Change Control – Qualified Systems<a class="sdfootnoteanc" name="sdfootnote2anc" href="#sdfootnote2sym" data-footnote="This section is not applicable to LDSOs, except when operating as a SMRA or UMSO"><sup>2</sup></a></div>

<div data-id="6-6.2" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">6.2 Change Control – All Systems</div>

<div data-id="6" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">6 Change Control</div>

<div data-id="7-7.1" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">7.1 Data Transfer Network<a class="sdfootnoteanc" name="sdfootnote3anc" href="#sdfootnote3sym" data-footnote="This section is not applicable to CVA MOAs"><sup>3</sup></a></div>

<div data-id="7-7.2" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">7.2 Communication and Transmission Controls</div>

<div data-id="7" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">7 Communications</div>

<div data-id="8-8.1" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">8.1 General</div>

<div data-id="8" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">8 Requirements for Controls</div>

<div data-id="9-9.1" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">9.1 General</div>

<div data-id="9" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">9 Processing Auditability</div>

<div data-id="10-10.1" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">10.1 Provision of Data to BSCCo and Associated Suppliers</div>

<div data-id="10-10.2" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">10.2 Provision of Data for resolution of Trading Disputes</div>

<div data-id="10-10.3" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">10.3 Provision of Data - General</div>

<div data-id="10" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">10 Provision of Data</div>

CONTENTS

Party Service Line 100: Generic Requirements for BSC Parties and Party Agents V1.0.0

Defined Terms

Cross-references