This Party Service Line (PSL) defines the non-functional requirements that Supplier Agents, LDSOs and CVA MOAs shall comply with to fulfil their functions under the BSC. In this PSL certain common responsibilities and obligations are expressed to be undertaken by all of the following Market Participants.

<div data-id="1-1.1" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">1.1 Purpose and Scope of this PSL</div>

<div data-id="1-1.2" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">1.2 BSC Provision</div>

<div data-id="1-1.3" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">1.3 Acronyms and Definitions</div>

<div data-id="1" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">1 Introduction</div>

<html><head></head><body><div data-id="2-2.1" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">2.1 <u class="defined-term">System</u> Availability</div></body></html>

<div data-id="2-2.2" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">2.2 Service Availability</div>

<div data-id="2-2.3" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">2.3 Backup and Disaster Recovery</div>

<html><head></head><body><div data-id="2" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">2 Service and <u class="defined-term">System</u> Availability</div></body></html>

<div data-id="3-3.1" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">3.1 Physical and Logical Security</div>

<div data-id="3-3.2" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">3.2 Security of Hardware Access</div>

<div data-id="3-3.3" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">3.3 Security of Software Access</div>

<div data-id="3-3.4" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">3.4 Access Controls</div>

<div data-id="3" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">3 Security/Access</div>

<div data-id="4-4.1" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">4.1 General</div>

<div data-id="4-4.2" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">4.2 Access to Non-Computerised Records</div>

<div data-id="4" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">4 Data Confidentiality</div>

<div data-id="5-5.1" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">5.1 Operational Controls</div>

<div data-id="5-5.2" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">5.2 Retention of Records</div>

<div data-id="5-5.3" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">5.3 Processing Continuity - Risk</div>

<div data-id="5-5.4" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">5.4 Processing Continuity - Impact</div>

<div data-id="5-5.5" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">5.5 Interface Controls</div>

<div data-id="5" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">5 Processing</div>

<html><head></head><body><div data-id="6-6.1" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">6.1 Change Control – Qualified <u class="defined-term"><u class="defined-term">System</u></u>s<a class="sdfootnoteanc" name="sdfootnote2anc" href="#sdfootnote2sym" data-footnote="This section is not applicable to <u class='defined-term'>LDSO</u>s, except when operating as a <u class='defined-term'>SMRA</u> or UMSO"><sup>2</sup></a></div></body></html>

<html><head></head><body><div data-id="6-6.2" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">6.2 Change Control – All <u class="defined-term">System</u>s</div></body></html>

<div data-id="6" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">6 Change Control</div>

<div data-id="7-7.1" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">7.1 Data Transfer Network<a class="sdfootnoteanc" name="sdfootnote3anc" href="#sdfootnote3sym" data-footnote="This section is not applicable to CVA MOAs"><sup>3</sup></a></div>

<div data-id="7-7.2" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">7.2 <u class='defined-term'>Communication</u> and Transmission Controls</div>

<div data-id="7" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">7 <u class='defined-term'>Communication</u>s</div>

<div data-id="8-8.1" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">8.1 General</div>

<div data-id="8" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">8 Requirements for Controls</div>

<div data-id="9-9.1" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">9.1 General</div>

<div data-id="9" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">9 Processing Auditability</div>

<html><head></head><body><div data-id="10-10.1" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">10.1 Provision of Data to BSCCo and Associated <u class="defined-term">Supplier</u>s</div></body></html>

<div data-id="10-10.2" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">10.2 Provision of Data for resolution of Trading Disputes</div>

<div data-id="10-10.3" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">10.3 Provision of Data - General</div>

<div data-id="10" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">10 Provision of Data</div>

CONTENTS

Party Service Line 100: Generic Requirements for BSC Parties and Party Agents V4.0

Defined Terms

Cross-references