The SSC (and SECAS acting on its behalf) adheres to the SEC Panel Information Policy which ensures the safeguarding of the confidentiality, privacy and security of information handled by the SSC. The SSC uses Egress (approved by NCSC) as a secure, encrypted format to handle, store and retain confidential information and access is restricted to ‘those who have a need to know’.

SSC Members have signed ‘Non-Disclosure Agreements’ and use information about material security vulnerabilities and security incidents to undertake risk assessments as required by the Smart Energy Code (SEC) and to monitor risk mitigations. The SSC will ensure that parties affected by a vulnerability are made aware as required by the CPA Build Standard.

The information you provide within this form will be made available to the SSC who will notify SEC User Parties that are currently operating one or more of the affected Devices. This is to ensure that obligations under G3.17 – G3.21 are met.

Please note that (Required) denotes a mandatory field that the manufacturer must fill in.

The Smart Energy Code (SEC) places obligations on DCC Users (SEC Parties who have completed the User Entry Process) to notify the Security Sub-Committee (SSC) of any Vulnerabilities or Incidents that occur in, or cause a material adverse effect on the security of, hardware, software, firmware or a Device. These obligations are G2.11, G2.15, G2.30, G3.5 and G3.18.

In addition, DCC Users make use of the Smart Metering Key Infrastructure (SMKI). SMKI provides a secure and effective means of ensuring that messages to and from Smart Metering Equipment are properly authenticated, provide integrity and, where applicable, provide non-repudiation. SMKI can become Compromised (or suspected of being Compromised) and may adversely affect the security of a DCC User. DCC Users should inform the SSC and the SMKI Policy Management Authority (SMKI PMA) of a Compromise (or suspected Compromise) of their Cryptographic Material.

This form has been created for DCC Users to notify the SSC and/or the SMKI PMA of any Security Vulnerabilities or Security Incidents, or Compromises (or suspected Compromises) of Cryptographic Material. Egress is a secure and effective mechanism using encryption for sharing sensitive information and has been selected as the secure web-based platform to share confidential smart metering related information.

The SSC (and SECAS acting on its behalf) adheres to the SEC Panel Information Policy which ensures the safeguarding of the confidentiality, privacy and security of information handled by the SSC. The SSC uses Egress (approved by NCSC) as a secure, encrypted format to handle, store and retain confidential information and access is restricted to ‘those who have a need to know’.

SSC Members have signed ‘Non-Disclosure Agreements’ and use information about material security vulnerabilities and security incidents to undertake risk assessments as required by the Smart Energy Code (SEC) and to monitor risk mitigations.

The information you provide within this form will be made available to the SSC and/or SMKI PMA via SECAS – who are the Smart Energy Code Secretariat and Administrator.

Please note that (Required) denotes a mandatory field that the DCC or DCC User must fill in